{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"}
{"level":"debug","ts":"2026-07-09T04:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"}
{"level":"error","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"}
{"level":"debug","ts":"2026-07-09T04:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T04:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"}
{"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"}
{"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T04:36:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T04:36:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T04:36:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"}
{"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44160","PortSpecifier":{"PortValue":44160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571765,"nanos":601988205},"http":{"id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f7f84a5-45ab-4a30-a190-619bb31dda85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571765,"nanos":642363125},"http":{"id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b49b1f-e7fd-4385-98b4-10ec0deb63a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86a1e72c-93c3-4b84-add0-c814f17419ec","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44162","PortSpecifier":{"PortValue":44162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571765,"nanos":682903752},"http":{"id":"86a1e72c-93c3-4b84-add0-c814f17419ec","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d\"}"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","subscription":"e2e-rate-iso-a-77f3bf","tenant":"e2e-shared-a-6bd312","userId":"30bd9db0-9961-4161-a387-c581f31f490d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-77f3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-77f3bf"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","selected_subscription":"e2e-rate-iso-a-77f3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-77f3bf@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86a1e72c-93c3-4b84-add0-c814f17419ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44178","PortSpecifier":{"PortValue":44178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e663d352-e9fd-4d17-924c-909b77f9e93c","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44178","PortSpecifier":{"PortValue":44178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571766,"nanos":740842586},"http":{"id":"e663d352-e9fd-4d17-924c-909b77f9e93c","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d\"}"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","subscription":"e2e-rate-iso-a-77f3bf","tenant":"e2e-shared-a-6bd312","userId":"30bd9db0-9961-4161-a387-c581f31f490d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-77f3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-77f3bf"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","selected_subscription":"e2e-rate-iso-a-77f3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-77f3bf@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e663d352-e9fd-4d17-924c-909b77f9e93c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44194","PortSpecifier":{"PortValue":44194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7655b47e-8398-452f-8c46-650a2a46439e","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44194","PortSpecifier":{"PortValue":44194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571767,"nanos":779985142},"http":{"id":"7655b47e-8398-452f-8c46-650a2a46439e","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XqY0vBYzSkUurE5I_k0nfFgEHwmAGCVy37RdgGIVVgB3Ph8jvt9PabXLqR6d\"}"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","subscription":"e2e-rate-iso-a-77f3bf","tenant":"e2e-shared-a-6bd312","userId":"30bd9db0-9961-4161-a387-c581f31f490d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-77f3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7655b47e-8398-452f-8c46-650a2a46439e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-77f3bf"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7655b47e-8398-452f-8c46-650a2a46439e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30bd9db0-9961-4161-a387-c581f31f490d","keyName":"e2e-rate-a-77f3bf","selected_subscription":"e2e-rate-iso-a-77f3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-77f3bf@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-77f3bf","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7655b47e-8398-452f-8c46-650a2a46439e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7655b47e-8398-452f-8c46-650a2a46439e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39378","PortSpecifier":{"PortValue":39378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571780,"nanos":536799982},"http":{"id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0ebfc6-ea96-4d79-92ad-7678048d4daf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40474","PortSpecifier":{"PortValue":40474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571780,"nanos":581277143},"http":{"id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"]}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e705e1dce26e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=98c488c9-b640-4da6-939b-4ae7b07b3478"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3462404a-d93a-4f63-9ebc-6c7f440ea30a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c092ae5-0cb0-4aa6-aadd-3053a1407893","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39384","PortSpecifier":{"PortValue":39384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39384","PortSpecifier":{"PortValue":39384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571780,"nanos":626332662},"http":{"id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs\"}"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","subscription":"e2e-rate-iso-a-302fa3","tenant":"e2e-shared-a-6bd312","userId":"e86a1269-34c9-45ed-9382-ff162053b6b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-302fa3"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","selected_subscription":"e2e-rate-iso-a-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-302fa3@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ea4bf8-4cd9-4813-8014-cc6d0418dc52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3e3457d-916e-471b-b861-eedceecd8a1b","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39398","PortSpecifier":{"PortValue":39398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571781,"nanos":665768392},"http":{"id":"c3e3457d-916e-471b-b861-eedceecd8a1b","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs\"}"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","subscription":"e2e-rate-iso-a-302fa3","tenant":"e2e-shared-a-6bd312","userId":"e86a1269-34c9-45ed-9382-ff162053b6b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-302fa3"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","selected_subscription":"e2e-rate-iso-a-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-302fa3@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e3457d-916e-471b-b861-eedceecd8a1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81236341-cd65-900f-9a1c-e30a6f3d5130","method":"POST","path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions","host":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39410","PortSpecifier":{"PortValue":39410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571782,"nanos":700749011},"http":{"id":"81236341-cd65-900f-9a1c-e30a6f3d5130","method":"POST","headers":{":authority":"e2e-shared-a-6bd312.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wWfIa77aLydJdu04_Oqf1x0EE1DZ9Oa4hzOYNyLmGnSkkOCTJYN2LvaeGaCs\"}"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","subscription":"e2e-rate-iso-a-302fa3","tenant":"e2e-shared-a-6bd312","userId":"e86a1269-34c9-45ed-9382-ff162053b6b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\",\"requestedSubscription\":\"e2e-rate-iso-a-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bd312.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-302fa3"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e86a1269-34c9-45ed-9382-ff162053b6b0","keyName":"e2e-rate-a-302fa3","selected_subscription":"e2e-rate-iso-a-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-a-6bd312/e2e-rate-iso-a-302fa3@ai-tenant-e2e-shared-a-6bd312/rate-test-model-6bd312","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bd312","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-302fa3","namespace":"ai-tenant-e2e-shared-a-6bd312","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81236341-cd65-900f-9a1c-e30a6f3d5130","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40490","PortSpecifier":{"PortValue":40490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","method":"POST","path":"/ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59/v1/completions","host":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40490","PortSpecifier":{"PortValue":40490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783571782,"nanos":732558918},"http":{"id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","method":"POST","headers":{":authority":"e2e-shared-b-589b59.apps.9863c9e8-1cca-438b-bfcb-e705e1dce26e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-157Y5et7R0IwUFd0R_RuFUPNCK22vfzpuj6l68zwUsQy7PA7V9dyCz4UvhPBC"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-157Y5et7R0IwUFd0R_RuFUPNCK22vfzpuj6l68zwUsQy7PA7V9dyCz4UvhPBC\"}"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ac19b0c-69a4-43ee-ab2a-8f8a2e2db3da","keyName":"e2e-rate-b-302fa3","subscription":"e2e-rate-iso-b-302fa3","tenant":"e2e-shared-b-589b59","userId":"6ac19b0c-69a4-43ee-ab2a-8f8a2e2db3da","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\",\"requestedSubscription\":\"e2e-rate-iso-b-302fa3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-589b59.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-589b59","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-302fa3","namespace":"ai-tenant-e2e-shared-b-589b59","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-302fa3"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ac19b0c-69a4-43ee-ab2a-8f8a2e2db3da","keyName":"e2e-rate-b-302fa3","selected_subscription":"e2e-rate-iso-b-302fa3","selected_subscription_key":"ai-tenant-e2e-shared-b-589b59/e2e-rate-iso-b-302fa3@ai-tenant-e2e-shared-b-589b59/rate-test-model-589b59","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-589b59","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-302fa3","namespace":"ai-tenant-e2e-shared-b-589b59","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T04:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50cfdb7f-fd06-4383-b767-2ee6104a864b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eedb15ff0af39ab93dd78ea24e525d64e37d9fb3ee56a1437f96f28afb1ff7f"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3296843615b1cb082cda81e71549f11c6eacb5ba009888ec3a2ab381c64c0ef4"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448a71a0e47b91809eb578fd931e4b3b359ab6d145ff4b348d40842a9d37c041"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4328ee8fc8f24dd2c0c663d2fb34abe2b1f7af5f2ed3ed1b4d822e115766fbea"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04fbdcfd55057a62a2a197b354294718667d0d7028566718c19a96fd1f476210"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e954dbef497be72c8b16865963b1cec5f813436a7db325e77b939c9c53958b1"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ef2ca93dbc5c03a9da948db0b67db4210a1191dac8965f337971bc2c1997bc"}
{"level":"info","ts":"2026-07-09T04:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f771806356c8c7e1968379a0fbbed76bd0d1d87c0ee0b03c55fbdcef2274321c"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0347e89a3494eba4701369824e8cf82bce06ec9f33c42dcf989d7d6f61e5b9db"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8964eba5d74805172c87411b3872abdbe1ae6b9ab28c99a910b23721d44bd905"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cab9ee67c8c5b545e58eb290cd5aba7227ec829f7ff142af9f821dd28024423"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c09553eee1d8fee9d5fd4f24ddd297d851d8297286c5d6e6f60e1505a7295f9"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18049312cd3281422dda1394e5520f86495afaeaac2c0bbe237c1cb3ed6a1dcb"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/732724e4aa98bc2987ee7ffea76d18ed7c790c4c1d7e16188bbbbe384884648b"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/238448ab50d57e4094ecbf8f64c554eb04b92bab5fc630bbd95a61bb0caf5fe5"}
{"level":"info","ts":"2026-07-09T04:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c4dc9402eb62d671a5269af1e677f9ede6834f2840979e3ce2e518f88274035"}
{"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd72d769e3263a282ce6f15b1ca8c8023adaab7a9088c8b364e6e4eb93689301"}
{"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc9ee88d7fa9ef13cfe501a79f5a8bd35bf0c87cd88632f2b294f116b9e6dc3"}
{"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0efe2b4768a44f8324e865b5777735eaabae17774e28c67ace4220c24847f863"}
{"level":"info","ts":"2026-07-09T04:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b0a2b074404259ae826e42e1a82fbd5924dea7b1e5afd0ab8b8081917880e9d"}
{"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d4164edcb14408157ee8d9a65ea3b72ab50d9e47d50b6e6c17f0c46bd35da9a"}
{"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fe83e46a42548dadaa01a65a3c789332e908f79dcb111a2cf03d5c474f64c7c"}
{"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9556fbbf1482fea39f704afebd0f20f2492618ad4f2d293cad091454e6164eff"}
{"level":"info","ts":"2026-07-09T04:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be12b9fc485c506a85c1050d7b618faf8e73a8463fed9ef5f938fd8959b6a42"}