{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"error","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"error","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"error","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T16:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T16:36:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T16:36:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:36:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60316","PortSpecifier":{"PortValue":60316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60316","PortSpecifier":{"PortValue":60316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701379,"nanos":601314456},"http":{"id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e7dc66c-5f1c-4ece-bf8f-9b9af50b40e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50956","PortSpecifier":{"PortValue":50956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50956","PortSpecifier":{"PortValue":50956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701379,"nanos":647331282},"http":{"id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0d70d85-fbb7-4af6-8c7c-874d0496c24b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60330","PortSpecifier":{"PortValue":60330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701379,"nanos":694725642},"http":{"id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y\"}"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","subscription":"e2e-rate-iso-a-7c7b69","tenant":"e2e-shared-a-c32d0d","userId":"431930c2-3233-41d8-9d54-106f6dfb1bda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-7c7b69\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c7b69"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","selected_subscription":"e2e-rate-iso-a-7c7b69","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-7c7b69@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"252fc7e0-7dd2-4a37-acb9-65c1b3e765ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88334df0-c731-462c-afad-668b31ec238c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60344","PortSpecifier":{"PortValue":60344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88334df0-c731-462c-afad-668b31ec238c","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88334df0-c731-462c-afad-668b31ec238c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60344","PortSpecifier":{"PortValue":60344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701380,"nanos":788631258},"http":{"id":"88334df0-c731-462c-afad-668b31ec238c","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88334df0-c731-462c-afad-668b31ec238c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y\"}"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","subscription":"e2e-rate-iso-a-7c7b69","tenant":"e2e-shared-a-c32d0d","userId":"431930c2-3233-41d8-9d54-106f6dfb1bda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88334df0-c731-462c-afad-668b31ec238c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-7c7b69\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88334df0-c731-462c-afad-668b31ec238c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c7b69"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88334df0-c731-462c-afad-668b31ec238c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","selected_subscription":"e2e-rate-iso-a-7c7b69","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-7c7b69@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88334df0-c731-462c-afad-668b31ec238c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88334df0-c731-462c-afad-668b31ec238c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60356","PortSpecifier":{"PortValue":60356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60356","PortSpecifier":{"PortValue":60356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701381,"nanos":834168102},"http":{"id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tPDIVjnlxyZsSbKw_dbuG2keL1Q8O2lECe2QxI08a34pfIjawOJGXocB2n6Y\"}"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","subscription":"e2e-rate-iso-a-7c7b69","tenant":"e2e-shared-a-c32d0d","userId":"431930c2-3233-41d8-9d54-106f6dfb1bda","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-7c7b69\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7c7b69"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"431930c2-3233-41d8-9d54-106f6dfb1bda","keyName":"e2e-rate-a-7c7b69","selected_subscription":"e2e-rate-iso-a-7c7b69","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-7c7b69@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7c7b69","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2232bc3-8be6-422a-9c98-232cfd3ec6e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40454","PortSpecifier":{"PortValue":40454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40454","PortSpecifier":{"PortValue":40454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701394,"nanos":780563727},"http":{"id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab9c68ac-b28c-44c0-bf8c-47d640337a76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55138","PortSpecifier":{"PortValue":55138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55138","PortSpecifier":{"PortValue":55138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701394,"nanos":820972585},"http":{"id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"]}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9a27fba088"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=140fc507-4b2c-41b0-acee-fa2979abe5ce"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7a40ffd7-a182-4c3c-800e-1500d8c71f55","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5475480-87ec-4cf6-a7e6-a490b2afbbb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59b7567f-ab07-4f20-98ae-1381db24b36f","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40462","PortSpecifier":{"PortValue":40462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701394,"nanos":861686647},"http":{"id":"59b7567f-ab07-4f20-98ae-1381db24b36f","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd\"}"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","subscription":"e2e-rate-iso-a-210df5","tenant":"e2e-shared-a-c32d0d","userId":"462470d7-8089-49c4-9f0a-374020d07fe7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","selected_subscription":"e2e-rate-iso-a-210df5","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-210df5@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59b7567f-ab07-4f20-98ae-1381db24b36f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40464","PortSpecifier":{"PortValue":40464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701395,"nanos":903371983},"http":{"id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd\"}"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","subscription":"e2e-rate-iso-a-210df5","tenant":"e2e-shared-a-c32d0d","userId":"462470d7-8089-49c4-9f0a-374020d07fe7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","selected_subscription":"e2e-rate-iso-a-210df5","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-210df5@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1786fdad-6c65-4c3a-9742-93fd1d20e2a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cfcb340-2955-4d70-a89a-926526dbbc42","method":"POST","path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions","host":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701396,"nanos":942430854},"http":{"id":"7cfcb340-2955-4d70-a89a-926526dbbc42","method":"POST","headers":{":authority":"e2e-shared-a-c32d0d.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FApwXJt0mK99uR51_hwOx62tUZippM7W29mGccPHBvNt1zMWhSuM10lO7Ctd\"}"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","subscription":"e2e-rate-iso-a-210df5","tenant":"e2e-shared-a-c32d0d","userId":"462470d7-8089-49c4-9f0a-374020d07fe7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\",\"requestedSubscription\":\"e2e-rate-iso-a-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c32d0d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"462470d7-8089-49c4-9f0a-374020d07fe7","keyName":"e2e-rate-a-210df5","selected_subscription":"e2e-rate-iso-a-210df5","selected_subscription_key":"ai-tenant-e2e-shared-a-c32d0d/e2e-rate-iso-a-210df5@ai-tenant-e2e-shared-a-c32d0d/rate-test-model-c32d0d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c32d0d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-210df5","namespace":"ai-tenant-e2e-shared-a-c32d0d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfcb340-2955-4d70-a89a-926526dbbc42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3406f894-ba0c-4f0e-8d24-108a48510457","method":"POST","path":"/ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a/v1/completions","host":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783701396,"nanos":981189098},"http":{"id":"3406f894-ba0c-4f0e-8d24-108a48510457","method":"POST","headers":{":authority":"e2e-shared-b-466b1a.apps.58798563-7dab-4a60-82dd-fb9a27fba088.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Q0OVbpCCR6Pp3GrF_Hhd8171nUIrEwwPKDgmL7VsfDeuKxXX1XC77qlXQwxF"}
{"level":"debug","ts":"2026-07-10T16:36:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Q0OVbpCCR6Pp3GrF_Hhd8171nUIrEwwPKDgmL7VsfDeuKxXX1XC77qlXQwxF\"}"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7fe8641d-86d3-40e4-9d92-319e7d2526a6","keyName":"e2e-rate-b-210df5","subscription":"e2e-rate-iso-b-210df5","tenant":"e2e-shared-b-466b1a","userId":"7fe8641d-86d3-40e4-9d92-319e7d2526a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\",\"requestedSubscription\":\"e2e-rate-iso-b-210df5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-466b1a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-466b1a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-210df5","namespace":"ai-tenant-e2e-shared-b-466b1a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-210df5"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7fe8641d-86d3-40e4-9d92-319e7d2526a6","keyName":"e2e-rate-b-210df5","selected_subscription":"e2e-rate-iso-b-210df5","selected_subscription_key":"ai-tenant-e2e-shared-b-466b1a/e2e-rate-iso-b-210df5@ai-tenant-e2e-shared-b-466b1a/rate-test-model-466b1a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-466b1a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-210df5","namespace":"ai-tenant-e2e-shared-b-466b1a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T16:36:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3406f894-ba0c-4f0e-8d24-108a48510457","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ec29e5502cf0b51a77c55ae319bdffd4b9ca89604704be78329ed1fb17c580"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6294409d08059efda77d6650765745a12e4a9ebbf11dc615944239b094847d33"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c334e0860c9dafe612b840c5bb1161425e10424bd1c37f7860f29cefaba32e0"}
{"level":"info","ts":"2026-07-10T16:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8718cca200123536ff9c6a928499f568651f0fb2029df043192484544fdf7e99"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef913707cf8652d878813c745b2956f6e49427904b4b23f6deada0eab53097bd"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a0c4e7db32efac6e8ab7829a97bb419d70ba52ed9b0a5369bdf8cadf16e9d5b"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/322b62bcac7d60f239b25acc0bc2b6e0f3a521e7d68cd4f823a9a0942e1d92b7"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/760233e7f89996db8d3b5f13d4c76b2d18872ff03c5ab8c81d14787d19a778d8"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e516db5c23ed85154435a02e7e13f25eddace5aafffc877b0b36f6bfaeb4881"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac186ffddb4b6e0043759f2f2dc9b66334ebf9220f94623b379c153eae09b13"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67e34b1a70d02e5ee56d407b442a890ee357bc12178d3c5bf8458ed3652d71d"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3bca17de12febca254d71d271a442cf75031cf31345eedb3f1d9406acc23190"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e39934c9ec24489795a53694d0c4e390d8511304a4f93ddb7a78a63792359cc"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97db275f2b0b511a678a57d101a193017967e9ed1ea084ede5a26168e46b1c46"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d982ef5207c517b564d619db07c813e42cb0590f1d95878c47e0b1f10f2ee72"}
{"level":"info","ts":"2026-07-10T16:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c3b0275187ba1375b7934fab861395b2b4769be59dc5e596787a213d43b574b"}
{"level":"info","ts":"2026-07-10T16:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7721743ad43c20bb21e8bfc1f5884927cdb097bfbb99562ebf2df3758f664b96"}
{"level":"info","ts":"2026-07-10T16:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f82f20d238e2ca215eff3d03db3f776b2de4f33dd8ec5567b7ccd28186e798a2"}
{"level":"info","ts":"2026-07-10T16:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e49051792b57df5810fde9b861812a25231a47623393de5f45505cc93d8fbc54"}
{"level":"info","ts":"2026-07-10T16:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b85944d46cb0fc25a732050670e3c03c485e9f3366f7b98af2162775b3fd965"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c555b1065512c5684811d38f24e050e04f087a711f9950c3b4d132b51540f2"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5c276c68701b91aa220d9445d305e58706ac1451887ccb2873ccfb5b643af6"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e838baba826e016bf3e907ef3289699aedfd7707968047696d2bc8d7dffeb8b7"}
{"level":"info","ts":"2026-07-10T16:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9820940ea561ac7233f172e32ee5331166ec7b68699ae5eb20ae3735d956d6c"}