{"level":"debug","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:05:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:05:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5aece103385142800549b4e99cd393fc7164071e79b394a5ec8c24937503b74"}
{"level":"info","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"info","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35568","PortSpecifier":{"PortValue":35568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ee05a67-aec6-43b1-a412-842250e4df13","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","object":"source:{address:{socket_address:{address:\"10.132.0.14:35568\"  port_value:35568}}}  destination:{address:{socket_address:{address:\"10.132.0.62:443\"  port_value:443}}}  request:{time:{seconds:1785459972  nanos:782067849}  http:{id:\"1ee05a67-aec6-43b1-a412-842250e4df13\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"1ee05a67-aec6-43b1-a412-842250e4df13\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"82fd9237071aa1d959c0a910fd1425dc41d32a0f42de1d69d7e30e72a82f0fa0\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"82fd9237071aa1d959c0a910fd1425dc41d32a0f42de1d69d7e30e72a82f0fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1ee05a67-aec6-43b1-a412-842250e4df13"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"1ee05a67-aec6-43b1-a412-842250e4df13","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":782067849,"seconds":1785459972}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35568},"address":"10.132.0.14:35568"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"82fd9237071aa1d959c0a910fd1425dc41d32a0f42de1d69d7e30e72a82f0fa0"},"headers":{":authority":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1ee05a67-aec6-43b1-a412-842250e4df13"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"1ee05a67-aec6-43b1-a412-842250e4df13","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":782067849,"seconds":1785459972},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:35568","port":35568}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee05a67-aec6-43b1-a412-842250e4df13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47706","PortSpecifier":{"PortValue":47706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","object":"source:{address:{socket_address:{address:\"10.132.0.14:47706\"  port_value:47706}}}  destination:{address:{socket_address:{address:\"10.133.0.54:443\"  port_value:443}}}  request:{time:{seconds:1785459972  nanos:834103921}  http:{id:\"525e0f1a-d4bd-411a-ac78-6b153aa022fa\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1iMzI1Njctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWIzMjU2Ny1vcGVuc2hpZnQtZGVmYXVsdC02ODY2ODRmYzRkLWRuMmg0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWIzMjU2Ny1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1iMzI1Njctb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.54~e2e-shared-b-b32567-openshift-default-686684fc4d-dn2h4.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"525e0f1a-d4bd-411a-ac78-6b153aa022fa\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b05a5bc387f633f3e392cb45085848e3961bf78224e6757be2d69f98b575e173\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b05a5bc387f633f3e392cb45085848e3961bf78224e6757be2d69f98b575e173"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.54~e2e-shared-b-b32567-openshift-default-686684fc4d-dn2h4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa"},"host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":834103921,"seconds":1785459972}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47706},"address":"10.132.0.14:47706"}}}}},"destination":{"address":"10.133.0.54:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b05a5bc387f633f3e392cb45085848e3961bf78224e6757be2d69f98b575e173"},"headers":{":authority":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1iMzI1Njctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWIzMjU2Ny1vcGVuc2hpZnQtZGVmYXVsdC02ODY2ODRmYzRkLWRuMmg0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWIzMjU2Ny1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1iMzI1Njctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.54~e2e-shared-b-b32567-openshift-default-686684fc4d-dn2h4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa"},"host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":834103921,"seconds":1785459972},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:47706","port":47706}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b32567/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"525e0f1a-d4bd-411a-ac78-6b153aa022fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35576","PortSpecifier":{"PortValue":35576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46bcb732-c7e6-4df1-9268-78e9f544533a","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","object":"source:{address:{socket_address:{address:\"10.132.0.14:35576\"  port_value:35576}}}  destination:{address:{socket_address:{address:\"10.132.0.62:443\"  port_value:443}}}  request:{time:{seconds:1785459972  nanos:876275657}  http:{id:\"46bcb732-c7e6-4df1-9268-78e9f544533a\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"46bcb732-c7e6-4df1-9268-78e9f544533a\"}  path:\"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions\"  host:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ghZIN5EjlUjcU7mN_fnIF0W7bmQL20c4EURjwWP97EMjnBR2u4leL848jnrf"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0d86f50-7881-4467-baa3-a2ccad58f652","keyName":"e2e-rate-a-9f70f1","subscription":"e2e-rate-iso-a-9f70f1","tenant":"e2e-shared-a-6a2164","userId":"a0d86f50-7881-4467-baa3-a2ccad58f652","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m","name":"rate-test-model-6a2164","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f70f1","namespace":"ai-tenant-e2e-shared-a-6a2164","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164"}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"46bcb732-c7e6-4df1-9268-78e9f544533a"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"46bcb732-c7e6-4df1-9268-78e9f544533a","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":876275657,"seconds":1785459972}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35576},"address":"10.132.0.14:35576"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573"},"headers":{":authority":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"46bcb732-c7e6-4df1-9268-78e9f544533a"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"46bcb732-c7e6-4df1-9268-78e9f544533a","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":876275657,"seconds":1785459972},"url_path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:35576","port":35576}}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f70f1"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0d86f50-7881-4467-baa3-a2ccad58f652","keyName":"e2e-rate-a-9f70f1","selected_subscription":"e2e-rate-iso-a-9f70f1","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2164/e2e-rate-iso-a-9f70f1@ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m","name":"rate-test-model-6a2164","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f70f1","namespace":"ai-tenant-e2e-shared-a-6a2164","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46bcb732-c7e6-4df1-9268-78e9f544533a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35584","PortSpecifier":{"PortValue":35584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","object":"source:{address:{socket_address:{address:\"10.132.0.14:35584\"  port_value:35584}}}  destination:{address:{socket_address:{address:\"10.132.0.62:443\"  port_value:443}}}  request:{time:{seconds:1785459973  nanos:921777739}  http:{id:\"8f5aac9c-0870-43ad-9b4f-81e47f310d02\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"8f5aac9c-0870-43ad-9b4f-81e47f310d02\"}  path:\"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions\"  host:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ghZIN5EjlUjcU7mN_fnIF0W7bmQL20c4EURjwWP97EMjnBR2u4leL848jnrf"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0d86f50-7881-4467-baa3-a2ccad58f652","keyName":"e2e-rate-a-9f70f1","subscription":"e2e-rate-iso-a-9f70f1","tenant":"e2e-shared-a-6a2164","userId":"a0d86f50-7881-4467-baa3-a2ccad58f652","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m","name":"rate-test-model-6a2164","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f70f1","namespace":"ai-tenant-e2e-shared-a-6a2164","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164"}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":921777739,"seconds":1785459973}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35584},"address":"10.132.0.14:35584"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573"},"headers":{":authority":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":921777739,"seconds":1785459973},"url_path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:35584","port":35584}}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f70f1"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0d86f50-7881-4467-baa3-a2ccad58f652","keyName":"e2e-rate-a-9f70f1","selected_subscription":"e2e-rate-iso-a-9f70f1","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2164/e2e-rate-iso-a-9f70f1@ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m","name":"rate-test-model-6a2164","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f70f1","namespace":"ai-tenant-e2e-shared-a-6a2164","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5aac9c-0870-43ad-9b4f-81e47f310d02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35592","PortSpecifier":{"PortValue":35592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","object":"source:{address:{socket_address:{address:\"10.132.0.14:35592\"  port_value:35592}}}  destination:{address:{socket_address:{address:\"10.132.0.62:443\"  port_value:443}}}  request:{time:{seconds:1785459974  nanos:968145137}  http:{id:\"26d3cab2-198b-4e12-8145-fa8b19a93f24\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"26d3cab2-198b-4e12-8145-fa8b19a93f24\"}  path:\"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions\"  host:\"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ghZIN5EjlUjcU7mN_fnIF0W7bmQL20c4EURjwWP97EMjnBR2u4leL848jnrf"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0d86f50-7881-4467-baa3-a2ccad58f652","keyName":"e2e-rate-a-9f70f1","subscription":"e2e-rate-iso-a-9f70f1","tenant":"e2e-shared-a-6a2164","userId":"a0d86f50-7881-4467-baa3-a2ccad58f652","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2164.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m","name":"rate-test-model-6a2164","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f70f1","namespace":"ai-tenant-e2e-shared-a-6a2164","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164"}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"26d3cab2-198b-4e12-8145-fa8b19a93f24"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":968145137,"seconds":1785459974}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35592},"address":"10.132.0.14:35592"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573"},"headers":{":authority":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2164-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2164.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2164-openshift-default-7984477588-7pbq2.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"26d3cab2-198b-4e12-8145-fa8b19a93f24"},"host":"e2e-shared-a-6a2164.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":968145137,"seconds":1785459974},"url_path":"/ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:35592","port":35592}}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f70f1"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0d86f50-7881-4467-baa3-a2ccad58f652","keyName":"e2e-rate-a-9f70f1","selected_subscription":"e2e-rate-iso-a-9f70f1","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2164/e2e-rate-iso-a-9f70f1@ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2164/models/facebook/opt-125m","name":"rate-test-model-6a2164","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f70f1","namespace":"ai-tenant-e2e-shared-a-6a2164","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2164/rate-test-model-6a2164"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26d3cab2-198b-4e12-8145-fa8b19a93f24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47708","PortSpecifier":{"PortValue":47708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","method":"POST","path":"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions","host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","object":"source:{address:{socket_address:{address:\"10.132.0.14:47708\"  port_value:47708}}}  destination:{address:{socket_address:{address:\"10.133.0.54:443\"  port_value:443}}}  request:{time:{seconds:1785459975  nanos:15303592}  http:{id:\"cff34c1a-a5fd-4a52-b44f-d86d689962bd\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-b32567-kserve-workload-svc.ai-tenant-e2e-shared-b-b32567.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.54~e2e-shared-b-b32567-openshift-default-686684fc4d-dn2h4.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"cff34c1a-a5fd-4a52-b44f-d86d689962bd\"}  path:\"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions\"  host:\"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3ZL2eYtoZW2DZT8s_w6z9GmrLmGP09kyzM0n51Pyckk8v9VM9I13LftTiMtc"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fee3b84d-e3ea-46f4-9ed1-cd7098254d34","keyName":"e2e-rate-b-9f70f1","subscription":"e2e-rate-iso-b-9f70f1","tenant":"e2e-shared-b-b32567","userId":"fee3b84d-e3ea-46f4-9ed1-cd7098254d34","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b32567.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-b32567/models/facebook/opt-125m","name":"rate-test-model-b32567","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9f70f1","namespace":"ai-tenant-e2e-shared-b-b32567","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567"}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-b32567-kserve-workload-svc.ai-tenant-e2e-shared-b-b32567.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1iMzI1Njctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWIzMjU2Ny1vcGVuc2hpZnQtZGVmYXVsdC02ODY2ODRmYzRkLWRuMmg0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWIzMjU2Ny1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1iMzI1Njctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.54~e2e-shared-b-b32567-openshift-default-686684fc4d-dn2h4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd"},"host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","method":"POST","path":"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":15303592,"seconds":1785459975}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47708},"address":"10.132.0.14:47708"}}}}},"destination":{"address":"10.133.0.54:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"},"headers":{":authority":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-b32567-kserve-workload-svc.ai-tenant-e2e-shared-b-b32567.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.54~e2e-shared-b-b32567-openshift-default-686684fc4d-dn2h4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd"},"host":"e2e-shared-b-b32567.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","method":"POST","path":"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":15303592,"seconds":1785459975},"url_path":"/ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:47708","port":47708}}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b32567/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9f70f1"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fee3b84d-e3ea-46f4-9ed1-cd7098254d34","keyName":"e2e-rate-b-9f70f1","selected_subscription":"e2e-rate-iso-b-9f70f1","selected_subscription_key":"ai-tenant-e2e-shared-b-b32567/e2e-rate-iso-b-9f70f1@ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-b32567/models/facebook/opt-125m","name":"rate-test-model-b32567","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9f70f1","namespace":"ai-tenant-e2e-shared-b-b32567","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b32567/rate-test-model-b32567"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cff34c1a-a5fd-4a52-b44f-d86d689962bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2e654430038948fdc9d2223c16ec75b380ee819a744f09df41f3bdb63d20573"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e0947fdd62774114064b3b8584b4348af88ce346aeee5729adbe96a0d9985e"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/145469ed34700bfd876387e8d19c7fa2bf005b1580188b333960142efd7c49c1"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2c9a5ca39706e67086dad5f09f19dcdfbeeedce9f7a5a19d8af781d62c88ac1"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1eb2ce2f0dd79db73a70a2352064988a67f8627490d39e98be5ea847d546e04b"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b05a5bc387f633f3e392cb45085848e3961bf78224e6757be2d69f98b575e173"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f821b67e1dced6a4ba09d529feb9d811a5decbc8687e4f79f4d53e44b5a85109"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/161743b3e0412ca2728c8d03d3992f1d98b1c28b48fa15438307eb28a1432224"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b6259595e477adebd227658422b68e5860136617326f5bdb54acbbf19332899"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e42a5b22f54acc33d4f3565ecb85152d042861d1ca5a6218a201b232d8aaca3c"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8701ec6a71c269dc2d91cfdec38b7819ef01ac4c58067b10ffe6a4638d6b99b"}
{"level":"info","ts":"2026-07-31T01:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82fd9237071aa1d959c0a910fd1425dc41d32a0f42de1d69d7e30e72a82f0fa0"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b2676f6118a21a887ce2931d5f7eb0b8bdf6391722bc9c85c8b202e51aeb102"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0e559390cc8017ba4e31b6f8f67ab879c966a778764b96f094f37911be212ad"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03b645eb38fb30af2beef691d32881bc527e3f5560463c04ccf8cd73acb7980e"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f79e7c59514ea3603aaef495b780b3082ca3ada2a6abdeede18e52748421e66"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/580fecf321fc2c87ba5da168e02d4ead46031dd1c3368b71dc83a0e4b090fa76"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e73f73944fbbf87e89ba08c66bfc453dd2fdafe81f28001d3760c4cf805ee2d"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/613c6297406c7ce487b28b71a4d642adf6ed93de4a01b687d58e2e7d8ccbebf0"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a981ef0b4f58acbcafba3b37376b52470cbda20a18783b0684e932cc23d4b063"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c43ae046d5f194b2a51f9933ea053a64a7fea85bf5f641ba12723cbd0d6d2ac"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7e4b20905578ce229776e364cd7138781311e85b6d2c71825f1a4643c940ae"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5aece103385142800549b4e99cd393fc7164071e79b394a5ec8c24937503b74"}
{"level":"info","ts":"2026-07-31T01:06:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f1a8c5f59342c7bd90b82a30e8483a1f5d3d6e0b3b37b2e4b70be6013e7cd50"}
{"level":"info","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"597a81e5-5878-4c1d-804e-a8f672929704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58400","PortSpecifier":{"PortValue":58400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"597a81e5-5878-4c1d-804e-a8f672929704","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"597a81e5-5878-4c1d-804e-a8f672929704","object":"source:{address:{socket_address:{address:\"10.132.0.14:58400\"  port_value:58400}}}  destination:{address:{socket_address:{address:\"10.132.0.38:443\"  port_value:443}}}  request:{time:{seconds:1785460059  nanos:176082772}  http:{id:\"597a81e5-5878-4c1d-804e-a8f672929704\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.38~maas-default-gateway-openshift-default-78bb78ff78-rrm47.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"597a81e5-5878-4c1d-804e-a8f672929704\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"597a81e5-5878-4c1d-804e-a8f672929704","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"597a81e5-5878-4c1d-804e-a8f672929704","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.38~maas-default-gateway-openshift-default-78bb78ff78-rrm47.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"597a81e5-5878-4c1d-804e-a8f672929704"},"host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"597a81e5-5878-4c1d-804e-a8f672929704","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":176082772,"seconds":1785460059}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58400},"address":"10.132.0.14:58400"}}}}},"destination":{"address":"10.132.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.38~maas-default-gateway-openshift-default-78bb78ff78-rrm47.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"597a81e5-5878-4c1d-804e-a8f672929704"},"host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"597a81e5-5878-4c1d-804e-a8f672929704","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":176082772,"seconds":1785460059},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:58400","port":58400}}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"597a81e5-5878-4c1d-804e-a8f672929704","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"597a81e5-5878-4c1d-804e-a8f672929704","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"597a81e5-5878-4c1d-804e-a8f672929704","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58402","PortSpecifier":{"PortValue":58402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f8c3e20-4402-4462-b17b-957ee6857644","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","object":"source:{address:{socket_address:{address:\"10.132.0.14:58402\"  port_value:58402}}}  destination:{address:{socket_address:{address:\"10.132.0.38:443\"  port_value:443}}}  request:{time:{seconds:1785460059  nanos:233169751}  http:{id:\"0f8c3e20-4402-4462-b17b-957ee6857644\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXJybTQ3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.38~maas-default-gateway-openshift-default-78bb78ff78-rrm47.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"0f8c3e20-4402-4462-b17b-957ee6857644\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VBISGBoSoPaDJ8dQ_WCIdjNLlYwsLQOKXGcP5z4RCwawWqrcw7J4qbw4JmYB"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"499a9983-7197-451a-bf47-8c8df873a3b8","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"499a9983-7197-451a-bf47-8c8df873a3b8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXJybTQ3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.38~maas-default-gateway-openshift-default-78bb78ff78-rrm47.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0f8c3e20-4402-4462-b17b-957ee6857644"},"host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"0f8c3e20-4402-4462-b17b-957ee6857644","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":233169751,"seconds":1785460059}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58402},"address":"10.132.0.14:58402"}}}}},"destination":{"address":"10.132.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.38~maas-default-gateway-openshift-default-78bb78ff78-rrm47.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0f8c3e20-4402-4462-b17b-957ee6857644"},"host":"maas.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"0f8c3e20-4402-4462-b17b-957ee6857644","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":233169751,"seconds":1785460059},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:58402","port":58402}}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"499a9983-7197-451a-bf47-8c8df873a3b8","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:07:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f8c3e20-4402-4462-b17b-957ee6857644","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1"}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1"}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60"}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0"}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T01:08:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3"}
{"level":"info","ts":"2026-07-31T01:08:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac"}
{"level":"info","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46774","PortSpecifier":{"PortValue":46774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","object":"source:{address:{socket_address:{address:\"10.132.0.14:46774\"  port_value:46774}}}  destination:{address:{socket_address:{address:\"10.132.0.65:443\"  port_value:443}}}  request:{time:{seconds:1785460107  nanos:124597799}  http:{id:\"86dcd99f-983a-484b-94e1-971ab4c33fdb\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.65~e2e-ipp-a-2b1008-openshift-default-5ff6676748-s9cb7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"86dcd99f-983a-484b-94e1-971ab4c33fdb\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/94bd37e3adec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=eba2d32c-9bca-4f05-8002-a710161f2a4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3936fdd9-2cb7-4e0a-8d55-e991c088ca71","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.65~e2e-ipp-a-2b1008-openshift-default-5ff6676748-s9cb7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"86dcd99f-983a-484b-94e1-971ab4c33fdb"},"host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":124597799,"seconds":1785460107}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46774},"address":"10.132.0.14:46774"}}}}},"destination":{"address":"10.132.0.65:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888"},"headers":{":authority":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.65~e2e-ipp-a-2b1008-openshift-default-5ff6676748-s9cb7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"86dcd99f-983a-484b-94e1-971ab4c33fdb"},"host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":124597799,"seconds":1785460107},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:46774","port":46774}}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2b1008/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:08:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86dcd99f-983a-484b-94e1-971ab4c33fdb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46672","PortSpecifier":{"PortValue":46672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","method":"POST","path":"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions","host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","object":"source:{address:{socket_address:{address:\"10.132.0.14:46672\"  port_value:46672}}}  destination:{address:{socket_address:{address:\"10.132.0.65:443\"  port_value:443}}}  request:{time:{seconds:1785460109  nanos:191882297}  http:{id:\"8b7b1bf1-b071-4aeb-a28a-c22d09c45528\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-2b1008-kserve-workload-svc.ai-tenant-e2e-ipp-a-2b1008.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.14\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.65~e2e-ipp-a-2b1008-openshift-default-5ff6676748-s9cb7.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.14\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"8b7b1bf1-b071-4aeb-a28a-c22d09c45528\"}  path:\"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions\"  host:\"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QjfnWgHdDXEE1lBS_yd7iy43t6bhaG9qLEG03TPTGAYWE1jmYSG9t0I6JArP"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fb51f82-ae92-460f-bf85-9c9373857c17","keyName":"e2e-ipp-2b1008","subscription":"ipp-route-2b1008-sub","tenant":"e2e-ipp-a-2b1008","userId":"5fb51f82-ae92-460f-bf85-9c9373857c17","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2b1008.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2b1008/models/facebook/opt-125m","name":"ipp-route-2b1008","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2b1008-sub","namespace":"ai-tenant-e2e-ipp-a-2b1008","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008"}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-2b1008-kserve-workload-svc.ai-tenant-e2e-ipp-a-2b1008.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.65~e2e-ipp-a-2b1008-openshift-default-5ff6676748-s9cb7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528"},"host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","method":"POST","path":"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":191882297,"seconds":1785460109}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46672},"address":"10.132.0.14:46672"}}}}},"destination":{"address":"10.132.0.65:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"},"headers":{":authority":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-2b1008-kserve-workload-svc.ai-tenant-e2e-ipp-a-2b1008.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.14","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0yYjEwMDgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTJiMTAwOC1vcGVuc2hpZnQtZGVmYXVsdC01ZmY2Njc2NzQ4LXM5Y2I3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTJiMTAwOC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0yYjEwMDgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.65~e2e-ipp-a-2b1008-openshift-default-5ff6676748-s9cb7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.14","x-forwarded-host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528"},"host":"e2e-ipp-a-2b1008.apps.de4644f8-5ada-4d02-afbc-94bd37e3adec.prod.konfluxeaas.com","id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","method":"POST","path":"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":191882297,"seconds":1785460109},"url_path":"/ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.14:46672","port":46672}}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2b1008/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-2b1008-sub"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fb51f82-ae92-460f-bf85-9c9373857c17","keyName":"e2e-ipp-2b1008","selected_subscription":"ipp-route-2b1008-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008-sub@ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2b1008/models/facebook/opt-125m","name":"ipp-route-2b1008","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2b1008-sub","namespace":"ai-tenant-e2e-ipp-a-2b1008","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2b1008/ipp-route-2b1008"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-31T01:08:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b7b1bf1-b071-4aeb-a28a-c22d09c45528","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e30a331dd700e45516319a11e35ee266afaf7e8702f995716d8574d2321e7c0"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ffd87574f080dbb81171db190e5e0536198f1e4b6b2a62b482676ccc94590b1"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55f9e7cd9ba8a4ba04bc2f7039638ed53fe198d650a1173febe4400762202210"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d960a308fbd223ba76d262d7489f64ea86c324c7e432ab37335d2cbc14476cf3"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99aff182ba13202796aec5cd1fde6c0c7047a1c2f7315b43833e6adff5d092ac"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0184898f7ed724bbb6ea38615effeb5fd51eca08eb47eefbbf7ab99fb2fea081"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d436ef6cd81ec78f22a06b9a70794e4b8e2cbf030fcb82eea4db5d29c7f137a3"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10ccb7e9c6fd88f7501bfa364825d0f4de3dedcf9e8fbcde866b3e170d5f1888"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b103044e4094c015541992cd543d2eb76236f0886cd383beb2bbe4c2b840b4a1"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/840cda0c0d9721242d4d22acbeb8ecfdb8de30580288836efbabc3283d9a7942"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b447230c0cf0d428df61604f1a5b18ff4ec4009691b167078ebc954df5d430d"}
{"level":"info","ts":"2026-07-31T01:09:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dd704c906b060ba4c8d7c5ab282da8841c43cfc40b3906ce0d7e22ac7f8ff60"}