{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51668","PortSpecifier":{"PortValue":51668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"323eb96a-d983-485e-aa59-7c1cd151530d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51668","PortSpecifier":{"PortValue":51668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452482,"nanos":531188913},"http":{"id":"323eb96a-d983-485e-aa59-7c1cd151530d","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37036","PortSpecifier":{"PortValue":37036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37036","PortSpecifier":{"PortValue":37036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452482,"nanos":569215637},"http":{"id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a089996-9dcb-41bf-b50f-f142168d5626","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452482,"nanos":605623982},"http":{"id":"9a089996-9dcb-41bf-b50f-f142168d5626","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA\"}"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","subscription":"e2e-rate-iso-a-b693bc","tenant":"e2e-shared-a-6e21d5","userId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-b693bc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b693bc"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","selected_subscription":"e2e-rate-iso-a-b693bc","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-b693bc@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191ea11a-0303-4055-96e9-6998006475cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51686","PortSpecifier":{"PortValue":51686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"191ea11a-0303-4055-96e9-6998006475cb","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191ea11a-0303-4055-96e9-6998006475cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51686","PortSpecifier":{"PortValue":51686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452483,"nanos":665586817},"http":{"id":"191ea11a-0303-4055-96e9-6998006475cb","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA\"}"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","subscription":"e2e-rate-iso-a-b693bc","tenant":"e2e-shared-a-6e21d5","userId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-b693bc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"191ea11a-0303-4055-96e9-6998006475cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b693bc"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","selected_subscription":"e2e-rate-iso-a-b693bc","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-b693bc@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191ea11a-0303-4055-96e9-6998006475cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191ea11a-0303-4055-96e9-6998006475cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452484,"nanos":702395142},"http":{"id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA\"}"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","subscription":"e2e-rate-iso-a-b693bc","tenant":"e2e-shared-a-6e21d5","userId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-b693bc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b693bc"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","selected_subscription":"e2e-rate-iso-a-b693bc","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-b693bc@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59976","PortSpecifier":{"PortValue":59976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59976","PortSpecifier":{"PortValue":59976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452495,"nanos":468449704},"http":{"id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50998","PortSpecifier":{"PortValue":50998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50998","PortSpecifier":{"PortValue":50998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452495,"nanos":535418594},"http":{"id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59984","PortSpecifier":{"PortValue":59984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59984","PortSpecifier":{"PortValue":59984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452495,"nanos":569023295},"http":{"id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx\"}"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","subscription":"e2e-rate-iso-a-ef416e","tenant":"e2e-shared-a-6e21d5","userId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","selected_subscription":"e2e-rate-iso-a-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-ef416e@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59994","PortSpecifier":{"PortValue":59994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e3dc0a9-035e-4a97-b375-35150decec01","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59994","PortSpecifier":{"PortValue":59994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452496,"nanos":612693933},"http":{"id":"9e3dc0a9-035e-4a97-b375-35150decec01","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx\"}"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","subscription":"e2e-rate-iso-a-ef416e","tenant":"e2e-shared-a-6e21d5","userId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","selected_subscription":"e2e-rate-iso-a-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-ef416e@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60004","PortSpecifier":{"PortValue":60004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"183d77ea-bbfe-4130-8ca3-9caac331899f","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60004","PortSpecifier":{"PortValue":60004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452497,"nanos":650679190},"http":{"id":"183d77ea-bbfe-4130-8ca3-9caac331899f","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","subscription":"e2e-rate-iso-a-ef416e","tenant":"e2e-shared-a-6e21d5","userId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","selected_subscription":"e2e-rate-iso-a-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-ef416e@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51004","PortSpecifier":{"PortValue":51004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"349407ac-680a-4bd7-8879-3b44c81721d7","method":"POST","path":"/ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0/v1/completions","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51004","PortSpecifier":{"PortValue":51004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452497,"nanos":685026343},"http":{"id":"349407ac-680a-4bd7-8879-3b44c81721d7","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-K0UQiGol6BPFO7aA_vKcArBtarKFTRdQcE3EAOtvcQxPJHu0d91InDowT1kc"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-K0UQiGol6BPFO7aA_vKcArBtarKFTRdQcE3EAOtvcQxPJHu0d91InDowT1kc\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ce64692-b8a7-4023-b24f-ee84eacf883a","keyName":"e2e-rate-b-ef416e","subscription":"e2e-rate-iso-b-ef416e","tenant":"e2e-shared-b-912fa0","userId":"7ce64692-b8a7-4023-b24f-ee84eacf883a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\",\"requestedSubscription\":\"e2e-rate-iso-b-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-912fa0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ef416e","namespace":"ai-tenant-e2e-shared-b-912fa0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ce64692-b8a7-4023-b24f-ee84eacf883a","keyName":"e2e-rate-b-ef416e","selected_subscription":"e2e-rate-iso-b-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-b-912fa0/e2e-rate-iso-b-ef416e@ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-912fa0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ef416e","namespace":"ai-tenant-e2e-shared-b-912fa0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"info","ts":"2026-07-07T19:29:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"info","ts":"2026-07-07T19:29:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}