--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53f3d9c-bee1-4347-8da5-2b4e84f1a2e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53f3d9c-bee1-4347-8da5-2b4e84f1a2e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c53f3d9c-bee1-4347-8da5-2b4e84f1a2e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c53f3d9c-bee1-4347-8da5-2b4e84f1a2e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55974","PortSpecifier":{"PortValue":55974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"068931b1-8704-4d84-b0a1-31cd713bc522","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55974","PortSpecifier":{"PortValue":55974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160617,"nanos":379998769},"http":{"id":"068931b1-8704-4d84-b0a1-31cd713bc522","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/auth-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"068931b1-8704-4d84-b0a1-31cd713bc522","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50904","PortSpecifier":{"PortValue":50904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50904","PortSpecifier":{"PortValue":50904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160617,"nanos":417728083},"http":{"id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/auth-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07ab38a0-a3f9-4449-b9f6-c61a7edbeaea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55984","PortSpecifier":{"PortValue":55984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:55984","PortSpecifier":{"PortValue":55984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160617,"nanos":456613633},"http":{"id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/auth-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2849d545-98b7-4bc5-a28f-442eaba7c4ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56440","PortSpecifier":{"PortValue":56440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56440","PortSpecifier":{"PortValue":56440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160636,"nanos":646936414},"http":{"id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/auth-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c9a991c-6d47-477b-a134-28d63c7b0a61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49424","PortSpecifier":{"PortValue":49424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49424","PortSpecifier":{"PortValue":49424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160636,"nanos":679534558},"http":{"id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/auth-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3eb9169e-b483-4957-bb99-90c6ab6f0e08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49434","PortSpecifier":{"PortValue":49434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"524a412a-048a-43e1-86fe-d8b400dc2b64","method":"GET","path":"/maas-api/v1/api-keys/8b936fa5-e65b-4923-8d3e-688a23909e3f","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49434","PortSpecifier":{"PortValue":49434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160636,"nanos":711942415},"http":{"id":"524a412a-048a-43e1-86fe-d8b400dc2b64","method":"GET","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b936fa5-e65b-4923-8d3e-688a23909e3f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b936fa5-e65b-4923-8d3e-688a23909e3f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/auth-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"524a412a-048a-43e1-86fe-d8b400dc2b64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"248180b7-861b-4b96-b3b9-f29740e1666a","method":"GET","path":"/maas-api/v1/api-keys/8b936fa5-e65b-4923-8d3e-688a23909e3f","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56450","PortSpecifier":{"PortValue":56450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160636,"nanos":744832350},"http":{"id":"248180b7-861b-4b96-b3b9-f29740e1666a","method":"GET","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b936fa5-e65b-4923-8d3e-688a23909e3f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8b936fa5-e65b-4923-8d3e-688a23909e3f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/auth-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"248180b7-861b-4b96-b3b9-f29740e1666a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47734","PortSpecifier":{"PortValue":47734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47734","PortSpecifier":{"PortValue":47734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160658,"nanos":11090003},"http":{"id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/auth-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9166833f-7b65-4aa0-aa16-c82a8bb9b6f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54658","PortSpecifier":{"PortValue":54658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4755f6bd-b7db-4168-b044-40a9dcffec95","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54658","PortSpecifier":{"PortValue":54658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160658,"nanos":45950512},"http":{"id":"4755f6bd-b7db-4168-b044-40a9dcffec95","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/auth-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4755f6bd-b7db-4168-b044-40a9dcffec95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc805ed-28ca-43da-8994-7555103344f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47750","PortSpecifier":{"PortValue":47750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acc805ed-28ca-43da-8994-7555103344f0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acc805ed-28ca-43da-8994-7555103344f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47750","PortSpecifier":{"PortValue":47750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160658,"nanos":75358574},"http":{"id":"acc805ed-28ca-43da-8994-7555103344f0","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lS3g52sTMwQlmVoE_rAhfXKs8f6ZjuolNUVyjij4D8BjIHMmSBLQ7gTIWapN"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lS3g52sTMwQlmVoE_rAhfXKs8f6ZjuolNUVyjij4D8BjIHMmSBLQ7gTIWapN\"}"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d0e5c19-c832-4974-91b8-e9a7511473ad","keyName":"e2e-auth-iso-a-2de816","subscription":"e2e-auth-iso-b2eee0","tenant":"e2e-shared-a-ef3a1a","userId":"3d0e5c19-c832-4974-91b8-e9a7511473ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acc805ed-28ca-43da-8994-7555103344f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/auth-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b2eee0"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acc805ed-28ca-43da-8994-7555103344f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc805ed-28ca-43da-8994-7555103344f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:10:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acc805ed-28ca-43da-8994-7555103344f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/145fca03ed53315c8457c68de1a4df1a58c68752abb4899959f841ab1f564995"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdf85dfa0dce734d82f708ff5529257f8b7b9d0a29c710628432a811a9f1c6c6"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87edebec46ef93482c34b72091c389200adce5659b1946181b23cc3272d6bade"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40ff42c5c9117f0f004ebb5718fd5e582bf44c9ebd959bcf7c21e3b9f5b0b5b6"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6163f24a60eb619a897aa63e997627d4056b6af986e40fc02e916696da61514"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/226fe8b2007163de6e4d01d476421ad0055ebd18b56e3f1a602834f0d6405371"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62633e436e249127fee57e3adc46f94701ea42c7a33e0bd9f34f64c4b7d2df7d"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a65f7437b04d2b14605b28cb068d975c9067c36e8df6643fd52811255b3f54a"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5324cf1f0d345aba1da1fe6c363173c17b5eaa7dfbf1083d4d1f1fc9dd71bb3a"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8586a8d36a04c45be3f4d647895aece3f0a885696e223c608a5f2cb5b0929701"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8321449d0103565a750d2fee727e352b4254630858705ffd27d2b258a0b443fc"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0172fbd4e03b8f21fb66dcf59efa32b1f46a023936e8696bb0c0bc12c20a7c32"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1f6cbcdeca33cbe069e2cce2cf0ec75cae32616cf6d80baf02edc5d4c528cbf"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5ce5bebe2b8477101c6aa85870ff88bf2f218ff0233a0313c323b447ed1e9c8"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a5bd4d205d7b6b5dbea273bde99b14a914575e96af6f46a74b982f4b81de67"}
{"level":"info","ts":"2026-07-16T00:11:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8beb238a3edde02091c2436bdd422ee4fe5530571015004999929f588b86b8b5"}
{"level":"debug","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"debug","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"}
{"level":"info","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:11:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"}
{"level":"info","ts":"2026-07-16T00:11:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"info","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"error","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"error","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836"}
{"level":"info","ts":"2026-07-16T00:12:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"}
{"level":"debug","ts":"2026-07-16T00:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d54b897ab3f4093b89c2d0c181fb911a42ed60b6ce919ae1b3f5f064ad9d9f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d54b897ab3f4093b89c2d0c181fb911a42ed60b6ce919ae1b3f5f064ad9d9f0"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa97f308cc8d76d68d10f39e53de52c5b26dec702a572dff0d663d96f2ed7d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa97f308cc8d76d68d10f39e53de52c5b26dec702a572dff0d663d96f2ed7d8"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"error","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"error","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a6889c3af94a821c724640b7afeffc0085c1c782c58511dca133ba44b8a140e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a6889c3af94a821c724640b7afeffc0085c1c782c58511dca133ba44b8a140e"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"debug","ts":"2026-07-16T00:12:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:12:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:12:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40212","PortSpecifier":{"PortValue":40212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"147a9811-f9eb-4735-80cd-e3b3ae902608","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40212","PortSpecifier":{"PortValue":40212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160746,"nanos":748361539},"http":{"id":"147a9811-f9eb-4735-80cd-e3b3ae902608","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/sub-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"147a9811-f9eb-4735-80cd-e3b3ae902608","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35828","PortSpecifier":{"PortValue":35828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35828","PortSpecifier":{"PortValue":35828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160746,"nanos":786530219},"http":{"id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/sub-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2f5fe6e-f340-488f-a724-56fb0c4ef96d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d891d22-012d-4eac-afb0-6270d336f150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40224","PortSpecifier":{"PortValue":40224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d891d22-012d-4eac-afb0-6270d336f150","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d891d22-012d-4eac-afb0-6270d336f150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:40224","PortSpecifier":{"PortValue":40224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160746,"nanos":820543071},"http":{"id":"0d891d22-012d-4eac-afb0-6270d336f150","method":"GET","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KVyFB41Kmd3nIDcc_dDgTiRoFWBacNLiCZ3k2KOvnQkM08AG8xDegTWiCuDJ"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KVyFB41Kmd3nIDcc_dDgTiRoFWBacNLiCZ3k2KOvnQkM08AG8xDegTWiCuDJ\"}"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fdcf0094-1fc9-4658-a32d-90ec9df19d00","keyName":"e2e-sub-iso-27bc16","subscription":"e2e-a-only-6638f8","tenant":"e2e-shared-a-ef3a1a","userId":"fdcf0094-1fc9-4658-a32d-90ec9df19d00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d891d22-012d-4eac-afb0-6270d336f150","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/sub-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6638f8"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d891d22-012d-4eac-afb0-6270d336f150","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d891d22-012d-4eac-afb0-6270d336f150","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d891d22-012d-4eac-afb0-6270d336f150","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35844","PortSpecifier":{"PortValue":35844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35844","PortSpecifier":{"PortValue":35844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160746,"nanos":862540512},"http":{"id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","method":"GET","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x3UZNDbTPERzMepE_mPGWe0eKXCi65Z57S72qezJumUSEpwg4ao98c889B3P"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x3UZNDbTPERzMepE_mPGWe0eKXCi65Z57S72qezJumUSEpwg4ao98c889B3P\"}"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"47e684cc-b999-46f8-90ac-c9443952f17d","keyName":"e2e-sub-iso-0b4e7f","subscription":"e2e-b-only-6638f8","tenant":"e2e-shared-b-e94b3e","userId":"47e684cc-b999-46f8-90ac-c9443952f17d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/sub-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6638f8"}
{"level":"info","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbcf7af2-f90f-43e3-8b5a-c8cb2ead252e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56254","PortSpecifier":{"PortValue":56254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56254","PortSpecifier":{"PortValue":56254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160756,"nanos":898290071},"http":{"id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/sub-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b60c27be-c9b0-4d6c-904a-89a183db61a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38874","PortSpecifier":{"PortValue":38874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38874","PortSpecifier":{"PortValue":38874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160756,"nanos":931373370},"http":{"id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/sub-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe6e2752-12ca-4c16-b7e2-a8495db3dbff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56266","PortSpecifier":{"PortValue":56266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56266","PortSpecifier":{"PortValue":56266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160756,"nanos":962268084},"http":{"id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eesFNkNtuHSE93QS_g6EXwP9Ibru9Bf7HeD8SeqwFJNQFly3qtlbJUY01nc2"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eesFNkNtuHSE93QS_g6EXwP9Ibru9Bf7HeD8SeqwFJNQFly3qtlbJUY01nc2\"}"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"edaa1a01-4d3e-4854-8223-e23c017e6b39","keyName":"e2e-sub-iso-38973e","subscription":"e2e-shared-sub-68799a","tenant":"e2e-shared-a-ef3a1a","userId":"edaa1a01-4d3e-4854-8223-e23c017e6b39","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/sub-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-68799a"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6959de0-9b0b-4a65-97cb-4f28f2c1cd80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38888","PortSpecifier":{"PortValue":38888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcd4eda5-09c5-4511-a281-2261ba59640a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38888","PortSpecifier":{"PortValue":38888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160756,"nanos":992945618},"http":{"id":"fcd4eda5-09c5-4511-a281-2261ba59640a","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-j5VbfCAt6qejPtAO_jFvinDfjXFn5eNmKguIxBt2ANwH8QC0UgzVK8iEARGt"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-j5VbfCAt6qejPtAO_jFvinDfjXFn5eNmKguIxBt2ANwH8QC0UgzVK8iEARGt\"}"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a95cdccb-0add-4db0-988c-d9aa41917995","keyName":"e2e-sub-iso-f3c146","subscription":"e2e-shared-sub-68799a","tenant":"e2e-shared-b-e94b3e","userId":"a95cdccb-0add-4db0-988c-d9aa41917995","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/sub-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-68799a"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:12:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd4eda5-09c5-4511-a281-2261ba59640a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1765bfb38f9dbd8c67752a0f49040eb324ce469c4ba1a0d4b3bcd71aedd369ed"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09e82c74c33025ccc9a0b847c9df8e37158aa77bcd808233de1587cba364eabe"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d4b55ee1dfcbfe4605a5d69031e9e0621214ea884fef5d3efed2ce290a46999"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f25cb9d0e48d9c85577710b7873fdb7f6a9bb7735ea24c1a7a87a66bcf0f898"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd80a6bf30c0292ee208046cb88020ca6a789c2b175fc9e3166fe2a293e101c1"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f095d45f16b5d44b4cd20ac5df1c10efef7f35fc90be45fc8767bdaef3cfeac3"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f00694e541f90cbf5b1c1d99642cf9c34419401b62bc7d841665386224fa1af"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/119ed9421bcf50a4173263de8190fcbe56016b8670990f40f26d88382acf1f87"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b68f5dc067c0df3d945aff0d85bbfdd371c7963e29d9f923514ec9498684836"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f85f0be97099d32d58279424606cad541ee2a1bad8311ed8d4895698d5476d78"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a108d994075fe778d1075cd48ecbfa9d3366eae7ad53faae2253539b01a683d1"}
{"level":"info","ts":"2026-07-16T00:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/380bf63f2876f6a76481e6d62cf4a3480a5bd620bac5beaa2f5c816be003cee1"}
{"level":"info","ts":"2026-07-16T00:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/107160233e50158d2271361f8c1b81fc48714ade7b4be8d96755c2c3d81938d7"}
{"level":"info","ts":"2026-07-16T00:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9956d7faa805cf5077809e628c10e5896cf2f2b6f2796086ab673c25c38d65e"}
{"level":"info","ts":"2026-07-16T00:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2330467e066f1363be5b87a8f76d20b23ffde7114219ea5b9e5274761fdea2ae"}
{"level":"info","ts":"2026-07-16T00:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1820844bfc5e4c1c264edacc43dac65d75ca9687b63889be2f628ae33ef733fb"}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"info","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"info","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358"}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"info","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"error","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"error","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f"}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"info","ts":"2026-07-16T00:13:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7e3fbfb534dcbc0086df6205088806551d953913c3edf911899e9389183ee47"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d54b897ab3f4093b89c2d0c181fb911a42ed60b6ce919ae1b3f5f064ad9d9f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d54b897ab3f4093b89c2d0c181fb911a42ed60b6ce919ae1b3f5f064ad9d9f0"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358"}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a6889c3af94a821c724640b7afeffc0085c1c782c58511dca133ba44b8a140e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a6889c3af94a821c724640b7afeffc0085c1c782c58511dca133ba44b8a140e"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:13:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"error","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd7211279100594f6b600dbfc3c1edc490363a6b96bcee4423c79448c21fcd13"}
{"level":"debug","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfa97f308cc8d76d68d10f39e53de52c5b26dec702a572dff0d663d96f2ed7d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"}
{"level":"info","ts":"2026-07-16T00:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfa97f308cc8d76d68d10f39e53de52c5b26dec702a572dff0d663d96f2ed7d8"}
{"level":"info","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50128","PortSpecifier":{"PortValue":50128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50128","PortSpecifier":{"PortValue":50128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160838,"nanos":143791484},"http":{"id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f95247d-ee5b-45fb-9642-9e1beaeb5dc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35158","PortSpecifier":{"PortValue":35158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35158","PortSpecifier":{"PortValue":35158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160838,"nanos":183286812},"http":{"id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"990b8cc7-9de7-461e-a466-36b9b9efb5c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160838,"nanos":224717018},"http":{"id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:13:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3648b9e4-74d7-4970-b5cd-75d1572f7655","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f03b9425-3214-4268-a95b-195578b86c02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50158","PortSpecifier":{"PortValue":50158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f03b9425-3214-4268-a95b-195578b86c02","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f03b9425-3214-4268-a95b-195578b86c02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50158","PortSpecifier":{"PortValue":50158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160839,"nanos":287349934},"http":{"id":"f03b9425-3214-4268-a95b-195578b86c02","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f03b9425-3214-4268-a95b-195578b86c02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03b9425-3214-4268-a95b-195578b86c02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f03b9425-3214-4268-a95b-195578b86c02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f03b9425-3214-4268-a95b-195578b86c02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50172","PortSpecifier":{"PortValue":50172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50172","PortSpecifier":{"PortValue":50172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160840,"nanos":326718159},"http":{"id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53b572bc-643e-423b-9252-f5e89c2d9ecd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5204660e-b738-47bf-8585-368d37193e73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50182","PortSpecifier":{"PortValue":50182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5204660e-b738-47bf-8585-368d37193e73","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5204660e-b738-47bf-8585-368d37193e73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50182","PortSpecifier":{"PortValue":50182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160841,"nanos":366163409},"http":{"id":"5204660e-b738-47bf-8585-368d37193e73","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5204660e-b738-47bf-8585-368d37193e73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5204660e-b738-47bf-8585-368d37193e73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5204660e-b738-47bf-8585-368d37193e73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5204660e-b738-47bf-8585-368d37193e73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5204660e-b738-47bf-8585-368d37193e73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5204660e-b738-47bf-8585-368d37193e73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecc53394-f84d-46ac-9886-87dbf762fb27","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160842,"nanos":400666363},"http":{"id":"ecc53394-f84d-46ac-9886-87dbf762fb27","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecc53394-f84d-46ac-9886-87dbf762fb27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50188","PortSpecifier":{"PortValue":50188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50188","PortSpecifier":{"PortValue":50188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160843,"nanos":437034826},"http":{"id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22aeb452-8d88-478a-ac9d-6001a6dc9706","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46550","PortSpecifier":{"PortValue":46550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f891b094-889a-40bc-8738-8f222d1e0e96","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46550","PortSpecifier":{"PortValue":46550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160844,"nanos":474047451},"http":{"id":"f891b094-889a-40bc-8738-8f222d1e0e96","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f891b094-889a-40bc-8738-8f222d1e0e96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46552","PortSpecifier":{"PortValue":46552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98676f02-7542-475c-8abe-930f01ceb4f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46552","PortSpecifier":{"PortValue":46552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160845,"nanos":509487000},"http":{"id":"98676f02-7542-475c-8abe-930f01ceb4f2","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98676f02-7542-475c-8abe-930f01ceb4f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46568","PortSpecifier":{"PortValue":46568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab004756-e569-4f2e-af11-f2fd20adc71a","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46568","PortSpecifier":{"PortValue":46568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160846,"nanos":551492403},"http":{"id":"ab004756-e569-4f2e-af11-f2fd20adc71a","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab004756-e569-4f2e-af11-f2fd20adc71a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6961f94c-1545-450a-8f3b-18aa95979309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46572","PortSpecifier":{"PortValue":46572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6961f94c-1545-450a-8f3b-18aa95979309","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6961f94c-1545-450a-8f3b-18aa95979309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46572","PortSpecifier":{"PortValue":46572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160847,"nanos":584220281},"http":{"id":"6961f94c-1545-450a-8f3b-18aa95979309","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6961f94c-1545-450a-8f3b-18aa95979309","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6961f94c-1545-450a-8f3b-18aa95979309","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6961f94c-1545-450a-8f3b-18aa95979309","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6961f94c-1545-450a-8f3b-18aa95979309","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46586","PortSpecifier":{"PortValue":46586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46586","PortSpecifier":{"PortValue":46586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160848,"nanos":621761813},"http":{"id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b4bc75e-edcb-44ac-a690-0f84593cc623","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46598","PortSpecifier":{"PortValue":46598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46598","PortSpecifier":{"PortValue":46598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160849,"nanos":658006655},"http":{"id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef1c06fe-44e7-451b-b6b4-6b0f9f103b9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0553418-6d53-40de-84b0-141ee67891dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46608","PortSpecifier":{"PortValue":46608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0553418-6d53-40de-84b0-141ee67891dc","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0553418-6d53-40de-84b0-141ee67891dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46608","PortSpecifier":{"PortValue":46608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160850,"nanos":691051931},"http":{"id":"f0553418-6d53-40de-84b0-141ee67891dc","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1e0pm4XiInSb8wBSG_c937gpjvrW40Imbu56TTxiRTPzMesn7uH7emRNszFEu\"}"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","subscription":"e2e-rate-iso-a-0dc4e2","tenant":"e2e-shared-a-ef3a1a","userId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-0dc4e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0553418-6d53-40de-84b0-141ee67891dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0dc4e2"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0553418-6d53-40de-84b0-141ee67891dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5a5ddfa-e0d0-4a64-8994-ba0f0c857e4f","keyName":"e2e-rate-a-0dc4e2","selected_subscription":"e2e-rate-iso-a-0dc4e2","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-0dc4e2@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0dc4e2","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0553418-6d53-40de-84b0-141ee67891dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0553418-6d53-40de-84b0-141ee67891dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37100","PortSpecifier":{"PortValue":37100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1570e7a4-7612-4b16-820f-ba938697aca3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37100","PortSpecifier":{"PortValue":37100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160859,"nanos":271375966},"http":{"id":"1570e7a4-7612-4b16-820f-ba938697aca3","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1570e7a4-7612-4b16-820f-ba938697aca3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36908","PortSpecifier":{"PortValue":36908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:36908","PortSpecifier":{"PortValue":36908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160859,"nanos":316695944},"http":{"id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"]}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d0b6195560c7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0213a02c-9386-4be9-96ee-70d64c422983"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"fbf2a566-4c74-4d18-9b7c-9ff9dfe8d5fe","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bb3309a6c372604a693a496f6fd4f34ad4eebc0e8a069e42eebdd4b5f09ea06c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aae5e3a0-bc7f-4994-9b9b-e924b01ebbc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37112","PortSpecifier":{"PortValue":37112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37112","PortSpecifier":{"PortValue":37112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160859,"nanos":356476031},"http":{"id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e919c0-ef09-46fe-898b-75c0b8d73fdb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37124","PortSpecifier":{"PortValue":37124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37124","PortSpecifier":{"PortValue":37124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160860,"nanos":391527674},"http":{"id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95f1bd5f-c4f0-456d-8999-dca0ad38c918","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37140","PortSpecifier":{"PortValue":37140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37140","PortSpecifier":{"PortValue":37140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160861,"nanos":422703857},"http":{"id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a038db0f-e2be-4ba2-9320-2a758d6351e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37142","PortSpecifier":{"PortValue":37142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51ad5421-65bf-4c17-b816-64f68f50e810","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37142","PortSpecifier":{"PortValue":37142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160862,"nanos":455003433},"http":{"id":"51ad5421-65bf-4c17-b816-64f68f50e810","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ad5421-65bf-4c17-b816-64f68f50e810","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37156","PortSpecifier":{"PortValue":37156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37156","PortSpecifier":{"PortValue":37156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160863,"nanos":487247050},"http":{"id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfff0da4-cb31-48f0-afe3-d923f41909e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56674","PortSpecifier":{"PortValue":56674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56674","PortSpecifier":{"PortValue":56674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160864,"nanos":518345225},"http":{"id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a93ee1-d9c8-4442-a065-e6818d4f7a23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56688","PortSpecifier":{"PortValue":56688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56688","PortSpecifier":{"PortValue":56688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160865,"nanos":551109540},"http":{"id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010982f6-e91b-4d4c-ba49-be7c94c2dc17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4fa9522-3404-48e6-89de-531b960d5191","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56696","PortSpecifier":{"PortValue":56696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4fa9522-3404-48e6-89de-531b960d5191","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4fa9522-3404-48e6-89de-531b960d5191","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56696","PortSpecifier":{"PortValue":56696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160866,"nanos":582485369},"http":{"id":"f4fa9522-3404-48e6-89de-531b960d5191","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4fa9522-3404-48e6-89de-531b960d5191","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fa9522-3404-48e6-89de-531b960d5191","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4fa9522-3404-48e6-89de-531b960d5191","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4fa9522-3404-48e6-89de-531b960d5191","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56698","PortSpecifier":{"PortValue":56698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56698","PortSpecifier":{"PortValue":56698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160867,"nanos":616864836},"http":{"id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f09616-4db5-4d18-9c69-a872e3c37ce5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56714","PortSpecifier":{"PortValue":56714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56714","PortSpecifier":{"PortValue":56714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160868,"nanos":649152630},"http":{"id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5fe9c4-f09d-4cd0-b848-76bb26256fb6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56726","PortSpecifier":{"PortValue":56726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56726","PortSpecifier":{"PortValue":56726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160869,"nanos":682930215},"http":{"id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e44ac139-7a0f-4c8d-b28e-af74df2193bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56732","PortSpecifier":{"PortValue":56732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56732","PortSpecifier":{"PortValue":56732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160870,"nanos":715867059},"http":{"id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b60c163-9c34-40e1-b233-cce6e48b1e08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56738","PortSpecifier":{"PortValue":56738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","method":"POST","path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions","host":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:56738","PortSpecifier":{"PortValue":56738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160871,"nanos":749135474},"http":{"id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","method":"POST","headers":{":authority":"e2e-shared-a-ef3a1a.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t1hxw31mXSfPNCrx_CYtcInm8CzHDLc9h6efhgbpnnbWoJgQAVBgCVfGrjh5\"}"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","subscription":"e2e-rate-iso-a-f4f818","tenant":"e2e-shared-a-ef3a1a","userId":"789b43ec-770c-4f5f-a998-c44a562b6f61","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\",\"requestedSubscription\":\"e2e-rate-iso-a-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ef3a1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ef3a1a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"789b43ec-770c-4f5f-a998-c44a562b6f61","keyName":"e2e-rate-a-f4f818","selected_subscription":"e2e-rate-iso-a-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-a-ef3a1a/e2e-rate-iso-a-f4f818@ai-tenant-e2e-shared-a-ef3a1a/rate-test-model-ef3a1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ef3a1a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f4f818","namespace":"ai-tenant-e2e-shared-a-ef3a1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4908a33-f2d0-463c-bbe2-eda1612638dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38972","PortSpecifier":{"PortValue":38972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","method":"POST","path":"/ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e/v1/completions","host":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:38972","PortSpecifier":{"PortValue":38972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784160871,"nanos":784632255},"http":{"id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","method":"POST","headers":{":authority":"e2e-shared-b-e94b3e.apps.863ba4eb-859d-4108-a543-d0b6195560c7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ju9GyUILKgrFaVQa_W3tnsbwHPoGCQ4dsdINDaKYeSv35kaZjl62lsbTBBQk"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ju9GyUILKgrFaVQa_W3tnsbwHPoGCQ4dsdINDaKYeSv35kaZjl62lsbTBBQk\"}"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eeff46de-d842-4133-863e-46d1cb8cd978","keyName":"e2e-rate-b-f4f818","subscription":"e2e-rate-iso-b-f4f818","tenant":"e2e-shared-b-e94b3e","userId":"eeff46de-d842-4133-863e-46d1cb8cd978","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e\",\"requestedSubscription\":\"e2e-rate-iso-b-f4f818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e94b3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e94b3e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f4f818","namespace":"ai-tenant-e2e-shared-b-e94b3e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e94b3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f4f818"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"eeff46de-d842-4133-863e-46d1cb8cd978","keyName":"e2e-rate-b-f4f818","selected_subscription":"e2e-rate-iso-b-f4f818","selected_subscription_key":"ai-tenant-e2e-shared-b-e94b3e/e2e-rate-iso-b-f4f818@ai-tenant-e2e-shared-b-e94b3e/rate-test-model-e94b3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e94b3e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f4f818","namespace":"ai-tenant-e2e-shared-b-e94b3e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T00:14:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13472dd1-ba5d-4459-9b69-a2dbaed8b377","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16f396e36dacd0b1ca043c6aa051c853b7a3cad548a7cbc2d19bb86038528963"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6491485ca7d891bd90f51c91714e539dc68e52e4847b5057601e0826b4f86de6"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c3d9f6dbc626447b1553aa275dff9fc1fcd5795752a868209d251bf927355e"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dfe1b157cee65e9ce1fa4ea4ce713bcfb32dd636870d50eb834957b2c70453a"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6900d48e98d2d3fadb37fe820422ec38703bdbcb9397917619f6bdd56f5d31ab"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa050f47a18f526355b9a9e9fdf6aed286c23269ccd8b0f25eda475e1f09f358"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/375eaa92887701f7b0c7289a159c2695ca6609f22d9f6a51673b58f8a054dcc5"}
{"level":"info","ts":"2026-07-16T00:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6c0d709d18a50552548a1070b5f0ff0499adaad43a746dad9f73eb45fa260ff"}
{"level":"info","ts":"2026-07-16T00:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ade64b9866a61601fe60fb7f5f10278d12bdedd282efbe7230a354d1368fb1"}
{"level":"info","ts":"2026-07-16T00:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a55ad542d3bbf60e2cfa83468de0cfeab7b945969414d230622126dded5be58d"}
{"level":"info","ts":"2026-07-16T00:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8cbaf8927231f1249134200d58d7edf07a3e76d0dc4f6ba4cd87239a1f4039f"}
{"level":"info","ts":"2026-07-16T00:14:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc6c96cc32e996986980eed6cea046c8d8bf9904b4626e2a7ce85a935974eb4f"}
{"level":"info","ts":"2026-07-16T00:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86fdc50c20e988f53852fdc065ea07a2b50d101fb1da85b0a9c5e97905edac5b"}
{"level":"info","ts":"2026-07-16T00:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d73d11371401d28817bbc12c42c7afe995c6b3ec568457510855a0ef978a8a2"}
{"level":"info","ts":"2026-07-16T00:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8740b1eb84ae2b04dc15144f24f539803490d03c0c5087df4f90ebe1f1dcbca"}
{"level":"info","ts":"2026-07-16T00:14:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8776d18c47df4303ec83ef4f9ea54495532ac3870c7f692246b24c19db54a308"}
{"level":"info","ts":"2026-07-16T00:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d075ceae3307c43fb2fe77253b5b8b9809d9d5ec7690cd250f5a245790a992d"}
{"level":"info","ts":"2026-07-16T00:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/963d9c22a23d42f07ff4b8eb8c0a302fc41cad5b7cb47fe96e59bc2d3e77a47f"}
{"level":"info","ts":"2026-07-16T00:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfa97f308cc8d76d68d10f39e53de52c5b26dec702a572dff0d663d96f2ed7d8"}
{"level":"info","ts":"2026-07-16T00:15:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d54b897ab3f4093b89c2d0c181fb911a42ed60b6ce919ae1b3f5f064ad9d9f0"}