{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013b6c9faae62ee213c01bb3efdd5056c1209f292a09badf8c1ba8b054c31cd0"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9163e0822e0ddc6b7b04000ac4763f4b6c353c798f3876345d3ad202fd7988a7"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0097bafd33b0823c8a0f61ba889dc047eacfb88301f64d44f7c91174c87b514c"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fa887e9ab2e6e6e53ff420d72a30112822d51fefcbcc12a79e496bad2f32c48"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/352401c3d242edd89438730b14e006bfaa6a117c4dceca296f350941702f7ff4"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"}
{"level":"info","ts":"2026-07-21T01:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35"}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"error","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"error","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e"}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e"}
{"level":"debug","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891"}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb"}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"info","ts":"2026-07-21T01:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T01:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T01:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T01:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T01:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T01:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"info","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45184","PortSpecifier":{"PortValue":45184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45184","PortSpecifier":{"PortValue":45184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595866,"nanos":836348983},"http":{"id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"]}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b2d1df7-9b9b-4179-b489-dcef946a61b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41730","PortSpecifier":{"PortValue":41730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:41730","PortSpecifier":{"PortValue":41730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595866,"nanos":883757360},"http":{"id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","method":"POST","headers":{":authority":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"]}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ed4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43c3ac1f-afcd-4b7a-ba71-0733535f4d9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45200","PortSpecifier":{"PortValue":45200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","method":"POST","path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45200","PortSpecifier":{"PortValue":45200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595866,"nanos":927101227},"http":{"id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZTVGmrwLmYi73S75_dxJ8LpkFITornJueOXqO7IVLPtPbgcilvd4Bp0JTatI"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZTVGmrwLmYi73S75_dxJ8LpkFITornJueOXqO7IVLPtPbgcilvd4Bp0JTatI\"}"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","keyName":"e2e-rate-a-082bf2","subscription":"e2e-rate-iso-a-082bf2","tenant":"e2e-shared-a-16b734","userId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\",\"requestedSubscription\":\"e2e-rate-iso-a-082bf2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-082bf2","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-082bf2"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","keyName":"e2e-rate-a-082bf2","selected_subscription":"e2e-rate-iso-a-082bf2","selected_subscription_key":"ai-tenant-e2e-shared-a-16b734/e2e-rate-iso-a-082bf2@ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-082bf2","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbb3e682-5a92-4138-9e92-b78ebbc2b04c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45210","PortSpecifier":{"PortValue":45210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","method":"POST","path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45210","PortSpecifier":{"PortValue":45210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595868,"nanos":12053956},"http":{"id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZTVGmrwLmYi73S75_dxJ8LpkFITornJueOXqO7IVLPtPbgcilvd4Bp0JTatI"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZTVGmrwLmYi73S75_dxJ8LpkFITornJueOXqO7IVLPtPbgcilvd4Bp0JTatI\"}"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","keyName":"e2e-rate-a-082bf2","subscription":"e2e-rate-iso-a-082bf2","tenant":"e2e-shared-a-16b734","userId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\",\"requestedSubscription\":\"e2e-rate-iso-a-082bf2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-082bf2","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-082bf2"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","keyName":"e2e-rate-a-082bf2","selected_subscription":"e2e-rate-iso-a-082bf2","selected_subscription_key":"ai-tenant-e2e-shared-a-16b734/e2e-rate-iso-a-082bf2@ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-082bf2","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a0b73c6-36a0-4a32-b4b2-450b718c3b99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45214","PortSpecifier":{"PortValue":45214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","method":"POST","path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45214","PortSpecifier":{"PortValue":45214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595869,"nanos":54836302},"http":{"id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZTVGmrwLmYi73S75_dxJ8LpkFITornJueOXqO7IVLPtPbgcilvd4Bp0JTatI"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZTVGmrwLmYi73S75_dxJ8LpkFITornJueOXqO7IVLPtPbgcilvd4Bp0JTatI\"}"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","keyName":"e2e-rate-a-082bf2","subscription":"e2e-rate-iso-a-082bf2","tenant":"e2e-shared-a-16b734","userId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\",\"requestedSubscription\":\"e2e-rate-iso-a-082bf2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-082bf2","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-082bf2"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2a4d969c-cdb0-44bb-a634-3c0d48f70b94","keyName":"e2e-rate-a-082bf2","selected_subscription":"e2e-rate-iso-a-082bf2","selected_subscription_key":"ai-tenant-e2e-shared-a-16b734/e2e-rate-iso-a-082bf2@ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-082bf2","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c2a04c-78bd-43f5-9c80-890dcfeaab0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44746","PortSpecifier":{"PortValue":44746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"568fcb4b-c225-49e1-a79e-04a991f79de0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44746","PortSpecifier":{"PortValue":44746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595882,"nanos":104591154},"http":{"id":"568fcb4b-c225-49e1-a79e-04a991f79de0","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"]}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"568fcb4b-c225-49e1-a79e-04a991f79de0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38076","PortSpecifier":{"PortValue":38076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dcff2df-5098-448d-b705-65dc2b36f570","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38076","PortSpecifier":{"PortValue":38076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595882,"nanos":149650666},"http":{"id":"4dcff2df-5098-448d-b705-65dc2b36f570","method":"POST","headers":{":authority":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"]}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad17328dc084"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8ec87f67-d205-4f31-9e1a-757057f40800"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c59daf3-e7c8-405f-a7dc-5e361277eafc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ed4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dcff2df-5098-448d-b705-65dc2b36f570","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44760","PortSpecifier":{"PortValue":44760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3d98b89-6929-440e-b7ac-21de7af039a9","method":"POST","path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44760","PortSpecifier":{"PortValue":44760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595882,"nanos":185973674},"http":{"id":"d3d98b89-6929-440e-b7ac-21de7af039a9","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XFzffYpc7DgH523K_DP0AKuwYdk5mtUYaMuxWDWHHKTvd5XOlXCKAX2Qxxf5"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XFzffYpc7DgH523K_DP0AKuwYdk5mtUYaMuxWDWHHKTvd5XOlXCKAX2Qxxf5\"}"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","keyName":"e2e-rate-a-3d0734","subscription":"e2e-rate-iso-a-3d0734","tenant":"e2e-shared-a-16b734","userId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\",\"requestedSubscription\":\"e2e-rate-iso-a-3d0734\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d0734","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d0734"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","keyName":"e2e-rate-a-3d0734","selected_subscription":"e2e-rate-iso-a-3d0734","selected_subscription_key":"ai-tenant-e2e-shared-a-16b734/e2e-rate-iso-a-3d0734@ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d0734","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3d98b89-6929-440e-b7ac-21de7af039a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44776","PortSpecifier":{"PortValue":44776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17da7181-cd54-4b72-8f2c-a549a79d4802","method":"POST","path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44776","PortSpecifier":{"PortValue":44776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595883,"nanos":230749842},"http":{"id":"17da7181-cd54-4b72-8f2c-a549a79d4802","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XFzffYpc7DgH523K_DP0AKuwYdk5mtUYaMuxWDWHHKTvd5XOlXCKAX2Qxxf5"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XFzffYpc7DgH523K_DP0AKuwYdk5mtUYaMuxWDWHHKTvd5XOlXCKAX2Qxxf5\"}"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","keyName":"e2e-rate-a-3d0734","subscription":"e2e-rate-iso-a-3d0734","tenant":"e2e-shared-a-16b734","userId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\",\"requestedSubscription\":\"e2e-rate-iso-a-3d0734\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d0734","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d0734"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","keyName":"e2e-rate-a-3d0734","selected_subscription":"e2e-rate-iso-a-3d0734","selected_subscription_key":"ai-tenant-e2e-shared-a-16b734/e2e-rate-iso-a-3d0734@ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d0734","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17da7181-cd54-4b72-8f2c-a549a79d4802","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44786","PortSpecifier":{"PortValue":44786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","method":"POST","path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions","host":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44786","PortSpecifier":{"PortValue":44786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595884,"nanos":268817109},"http":{"id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","method":"POST","headers":{":authority":"e2e-shared-a-16b734.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XFzffYpc7DgH523K_DP0AKuwYdk5mtUYaMuxWDWHHKTvd5XOlXCKAX2Qxxf5"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XFzffYpc7DgH523K_DP0AKuwYdk5mtUYaMuxWDWHHKTvd5XOlXCKAX2Qxxf5\"}"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","keyName":"e2e-rate-a-3d0734","subscription":"e2e-rate-iso-a-3d0734","tenant":"e2e-shared-a-16b734","userId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\",\"requestedSubscription\":\"e2e-rate-iso-a-3d0734\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-16b734.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d0734","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-16b734/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d0734"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b8eae9c3-7877-4ed2-b7b5-bb7d0aa8234c","keyName":"e2e-rate-a-3d0734","selected_subscription":"e2e-rate-iso-a-3d0734","selected_subscription_key":"ai-tenant-e2e-shared-a-16b734/e2e-rate-iso-a-3d0734@ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-16b734","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d0734","namespace":"ai-tenant-e2e-shared-a-16b734","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-16b734/rate-test-model-16b734"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"854fb1c7-81cc-4ee6-a6ae-965db97152bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38092","PortSpecifier":{"PortValue":38092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","method":"POST","path":"/ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b/v1/completions","host":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38092","PortSpecifier":{"PortValue":38092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784595884,"nanos":306194576},"http":{"id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","method":"POST","headers":{":authority":"e2e-shared-b-b4ed4b.apps.cd16f914-b9af-4bdd-af96-ad17328dc084.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-APKb0p54dmgi3HQ6_VGXsA4D8n15kPi9epSCqdPlTWmwL6LZDcUSmlTJ1xz5"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b4ed4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-APKb0p54dmgi3HQ6_VGXsA4D8n15kPi9epSCqdPlTWmwL6LZDcUSmlTJ1xz5\"}"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ed4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"269bbf85-2c71-4d3b-a248-71a0647f6438","keyName":"e2e-rate-b-3d0734","subscription":"e2e-rate-iso-b-3d0734","tenant":"e2e-shared-b-b4ed4b","userId":"269bbf85-2c71-4d3b-a248-71a0647f6438","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b4ed4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b\",\"requestedSubscription\":\"e2e-rate-iso-b-3d0734\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ed4b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b4ed4b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3d0734","namespace":"ai-tenant-e2e-shared-b-b4ed4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b"}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ed4b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3d0734"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"269bbf85-2c71-4d3b-a248-71a0647f6438","keyName":"e2e-rate-b-3d0734","selected_subscription":"e2e-rate-iso-b-3d0734","selected_subscription_key":"ai-tenant-e2e-shared-b-b4ed4b/e2e-rate-iso-b-3d0734@ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b4ed4b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3d0734","namespace":"ai-tenant-e2e-shared-b-b4ed4b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b4ed4b/rate-test-model-b4ed4b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T01:04:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae2b725f-8c5a-4174-963a-e84ec45cc2f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6a0eae1a9a3c138305389b93989ba1ba36976b74f68a116f2e23081b7909d8"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55f94530426ab493d83a4c1dfb29363def58d7cddc7e7f21f559d4c32b33bc84"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03ac267cd4a2fb312adc85754f47c7758d601cb900abb0d1d65449d1b125be27"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/faa7a0016d875ec724ffc010d448fedf3636e4cbd035a5c1eeec868c70350919"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f57e2b888176a3c98da6c39cf0db58c58c227857a3739f0d274d08ceaee1b2e"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5792349d3e8c767ad9b161090e70c49a3efde3d82a6523cb84f943169ac08fcc"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b4391218428c2088c3de6a3d5135aa7c4af8bcb7c9a3bc4ce1e9f9314b35821"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8173478cf4e183fe2c905757b8da5bd9fe8cb13ee6dd9f199c6575d27828cb4d"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67693a7cf2fd71fbf74256827cea7c01999cf31daf68791b68fb69725738ae25"}
{"level":"info","ts":"2026-07-21T01:04:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66dc455e2964c7caea1baa0b5dccbcb0807612943f276d38f530b3f37cf630ca"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f76466a67400654c78e0bc5c1d69ac64e4c0e087c8ffe2069c599367a6a58db"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3918f7449838a0de8591490ab9d4f1255863619cb4cb8ae42b46b5633be76a0c"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae0f9499c13c1ce485e99694dd40f753a3852227b8ca0e3d48ec45494525891"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b0cd080f8ac633d2536f646eb8270c8d48b8978697a8e5b045442c2dbd52fb2"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bea641ef5b5d0be337a25f485280d6af937d4a4bb943aaa10964dc90a0bfece"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8177b0b4757e9f69ec364396654f8761fd7df3b7a60d9aff536707f89ced9921"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/358942b9dc8daeceb59bf9c0e57c7647906efad3f698973ee3b7a477dd361aeb"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85b99ddf3041db00f0d3f477991afc208cb296507325183f1d37dc8c7d478f94"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3dea4e6c797bc39fa8d930a5a008861613a4dfbafe31399f2bf463b4753e2bf"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a40aebd1afef054c76197e1bba82dec1edc1c705dd94e02da557edbe00917a33"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05668ca634e7184db666d6a81d48206af7ddd983f9b78697f7188b11db65ec0c"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99b518c4d41e7fe7545f4b4c1b047ab312289cac5dcc151e83323fe1bf21635a"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc5e2f4ff7c98e33426dbe54c9e1ea945f9a31ef3ffec30374e2017227ae6d35"}
{"level":"info","ts":"2026-07-21T01:04:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d58fc9499dc8db6c36954b600e17667b7aa68619789f30f8467c9980a4e6e70"}