--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"error","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:21:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39078","PortSpecifier":{"PortValue":39078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35094554-dc8c-95c1-8a0f-9d83b548b270","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","object":"source:{address:{socket_address:{address:\"10.132.0.13:39078\"  port_value:39078}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917322  nanos:123043744}  http:{id:\"35094554-dc8c-95c1-8a0f-9d83b548b270\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"72\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"35094554-dc8c-95c1-8a0f-9d83b548b270\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"35094554-dc8c-95c1-8a0f-9d83b548b270"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"35094554-dc8c-95c1-8a0f-9d83b548b270","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":123043744,"seconds":1784917322}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39078},"address":"10.132.0.13:39078"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"35094554-dc8c-95c1-8a0f-9d83b548b270"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"35094554-dc8c-95c1-8a0f-9d83b548b270","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":123043744,"seconds":1784917322},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:39078","port":39078}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/auth-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35094554-dc8c-95c1-8a0f-9d83b548b270","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60594","PortSpecifier":{"PortValue":60594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ce582f5-91de-46fc-b95a-5ccce5044310","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","object":"source:{address:{socket_address:{address:\"10.132.0.13:60594\"  port_value:60594}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917322  nanos:173439329}  http:{id:\"9ce582f5-91de-46fc-b95a-5ccce5044310\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"72\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"9ce582f5-91de-46fc-b95a-5ccce5044310\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9ce582f5-91de-46fc-b95a-5ccce5044310"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"9ce582f5-91de-46fc-b95a-5ccce5044310","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":173439329,"seconds":1784917322}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60594},"address":"10.132.0.13:60594"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9ce582f5-91de-46fc-b95a-5ccce5044310"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"9ce582f5-91de-46fc-b95a-5ccce5044310","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":173439329,"seconds":1784917322},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60594","port":60594}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/auth-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ce582f5-91de-46fc-b95a-5ccce5044310","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39092","PortSpecifier":{"PortValue":39092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81967cb0-c626-4828-8d6f-2af3063c8219","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","object":"source:{address:{socket_address:{address:\"10.132.0.13:39092\"  port_value:39092}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917322  nanos:222746461}  http:{id:\"81967cb0-c626-4828-8d6f-2af3063c8219\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys/search\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"163\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"81967cb0-c626-4828-8d6f-2af3063c8219\"}  path:\"/maas-api/v1/api-keys/search\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"81967cb0-c626-4828-8d6f-2af3063c8219"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"81967cb0-c626-4828-8d6f-2af3063c8219","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":222746461,"seconds":1784917322}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":39092},"address":"10.132.0.13:39092"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"81967cb0-c626-4828-8d6f-2af3063c8219"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"81967cb0-c626-4828-8d6f-2af3063c8219","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":222746461,"seconds":1784917322},"url_path":"/maas-api/v1/api-keys/search","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:39092","port":39092}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/auth-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81967cb0-c626-4828-8d6f-2af3063c8219","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50498","PortSpecifier":{"PortValue":50498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a50d987-57b9-446b-9f2f-459b660eb471","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","object":"source:{address:{socket_address:{address:\"10.132.0.13:50498\"  port_value:50498}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917322  nanos:281707146}  http:{id:\"9a50d987-57b9-446b-9f2f-459b660eb471\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys/search\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"163\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"9a50d987-57b9-446b-9f2f-459b660eb471\"}  path:\"/maas-api/v1/api-keys/search\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9a50d987-57b9-446b-9f2f-459b660eb471"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"9a50d987-57b9-446b-9f2f-459b660eb471","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":281707146,"seconds":1784917322}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50498},"address":"10.132.0.13:50498"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9a50d987-57b9-446b-9f2f-459b660eb471"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"9a50d987-57b9-446b-9f2f-459b660eb471","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":281707146,"seconds":1784917322},"url_path":"/maas-api/v1/api-keys/search","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:50498","port":50498}}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/auth-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a50d987-57b9-446b-9f2f-459b660eb471","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"error","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"error","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"error","ts":"2026-07-24T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60ede5a8-3604-4494-88be-896ecb862948","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60ede5a8-3604-4494-88be-896ecb862948","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60ede5a8-3604-4494-88be-896ecb862948","object":"source:{address:{socket_address:{address:\"10.132.0.13:51836\"  port_value:51836}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917337  nanos:332316648}  http:{id:\"60ede5a8-3604-4494-88be-896ecb862948\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"72\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"60ede5a8-3604-4494-88be-896ecb862948\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60ede5a8-3604-4494-88be-896ecb862948","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60ede5a8-3604-4494-88be-896ecb862948","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"60ede5a8-3604-4494-88be-896ecb862948"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"60ede5a8-3604-4494-88be-896ecb862948","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":332316648,"seconds":1784917337}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51836},"address":"10.132.0.13:51836"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"60ede5a8-3604-4494-88be-896ecb862948"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"60ede5a8-3604-4494-88be-896ecb862948","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":332316648,"seconds":1784917337},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:51836","port":51836}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/auth-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60ede5a8-3604-4494-88be-896ecb862948","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60ede5a8-3604-4494-88be-896ecb862948","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60ede5a8-3604-4494-88be-896ecb862948","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4159032-ca06-4d31-a8fa-99d157384570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4159032-ca06-4d31-a8fa-99d157384570","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4159032-ca06-4d31-a8fa-99d157384570","object":"source:{address:{socket_address:{address:\"10.132.0.13:42186\"  port_value:42186}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917337  nanos:374595074}  http:{id:\"c4159032-ca06-4d31-a8fa-99d157384570\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"72\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"c4159032-ca06-4d31-a8fa-99d157384570\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4159032-ca06-4d31-a8fa-99d157384570","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4159032-ca06-4d31-a8fa-99d157384570","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c4159032-ca06-4d31-a8fa-99d157384570"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"c4159032-ca06-4d31-a8fa-99d157384570","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":374595074,"seconds":1784917337}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42186},"address":"10.132.0.13:42186"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c4159032-ca06-4d31-a8fa-99d157384570"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"c4159032-ca06-4d31-a8fa-99d157384570","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":374595074,"seconds":1784917337},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:42186","port":42186}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/auth-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4159032-ca06-4d31-a8fa-99d157384570","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4159032-ca06-4d31-a8fa-99d157384570","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4159032-ca06-4d31-a8fa-99d157384570","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42192","PortSpecifier":{"PortValue":42192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8576fb9-4a67-43ad-b672-428c456e23f5","method":"GET","path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","object":"source:{address:{socket_address:{address:\"10.132.0.13:42192\"  port_value:42192}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917337  nanos:418524790}  http:{id:\"d8576fb9-4a67-43ad-b672-428c456e23f5\"  method:\"GET\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"GET\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"d8576fb9-4a67-43ad-b672-428c456e23f5\"}  path:\"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d8576fb9-4a67-43ad-b672-428c456e23f5"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"d8576fb9-4a67-43ad-b672-428c456e23f5","method":"GET","path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":418524790,"seconds":1784917337}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42192},"address":"10.132.0.13:42192"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d8576fb9-4a67-43ad-b672-428c456e23f5"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"d8576fb9-4a67-43ad-b672-428c456e23f5","method":"GET","path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":418524790,"seconds":1784917337},"url_path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:42192","port":42192}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/auth-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8576fb9-4a67-43ad-b672-428c456e23f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","method":"GET","path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","object":"source:{address:{socket_address:{address:\"10.132.0.13:51844\"  port_value:51844}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917337  nanos:456277588}  http:{id:\"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9\"  method:\"GET\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"GET\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9\"}  path:\"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","method":"GET","path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":456277588,"seconds":1784917337}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51844},"address":"10.132.0.13:51844"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","method":"GET","path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":456277588,"seconds":1784917337},"url_path":"/maas-api/v1/api-keys/c9962977-d29e-418e-836d-6795e3cb9fd1","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:51844","port":51844}}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/auth-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c393f824-29a1-4b35-b4ac-96cdc7cd7dc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:22:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:22:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:22:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33590","PortSpecifier":{"PortValue":33590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","object":"source:{address:{socket_address:{address:\"10.132.0.13:33590\"  port_value:33590}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917348  nanos:258125440}  http:{id:\"a925128c-7d31-4cf0-bcf4-f9f1505f4e10\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"72\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"a925128c-7d31-4cf0-bcf4-f9f1505f4e10\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":258125440,"seconds":1784917348}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33590},"address":"10.132.0.13:33590"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":258125440,"seconds":1784917348},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:33590","port":33590}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/auth-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a925128c-7d31-4cf0-bcf4-f9f1505f4e10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55880","PortSpecifier":{"PortValue":55880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","object":"source:{address:{socket_address:{address:\"10.132.0.13:55880\"  port_value:55880}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917348  nanos:302334960}  http:{id:\"6f830588-fbf6-42fb-8ce0-3cf8af9b5972\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"72\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"6f830588-fbf6-42fb-8ce0-3cf8af9b5972\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":302334960,"seconds":1784917348}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55880},"address":"10.132.0.13:55880"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":302334960,"seconds":1784917348},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:55880","port":55880}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/auth-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f830588-fbf6-42fb-8ce0-3cf8af9b5972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33606","PortSpecifier":{"PortValue":33606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","object":"source:{address:{socket_address:{address:\"10.132.0.13:33606\"  port_value:33606}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917348  nanos:348683619}  http:{id:\"6f18ff2c-2b94-4d19-8ced-1d757c5dd560\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/internal/v1/subscriptions/select\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"187\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"6f18ff2c-2b94-4d19-8ced-1d757c5dd560\"}  path:\"/maas-api/internal/v1/subscriptions/select\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qCA94TKyc1HwWXmR_mQRbsUkhu2ngZ8BY3TrR3xUdrQikoq7sBdmNvKW3IEW"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d83302ba-b858-49b9-9561-e97a4b11bdd1","keyName":"e2e-auth-iso-a-aed1a5","subscription":"e2e-auth-iso-888068","tenant":"e2e-shared-a-2542df","userId":"d83302ba-b858-49b9-9561-e97a4b11bdd1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":348683619,"seconds":1784917348}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33606},"address":"10.132.0.13:33606"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":348683619,"seconds":1784917348},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:33606","port":33606}}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/auth-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-888068"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:22:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f18ff2c-2b94-4d19-8ced-1d757c5dd560","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/401b6632d310a4f3b71fb7d87fe63189ab02ec0b873c40b960eae643e63fe5b2"}
{"level":"info","ts":"2026-07-24T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7b1ec70b1f37c4f7e370ef4b0247df72f656fdcc86c7110434d92e4c637bf5a"}
{"level":"info","ts":"2026-07-24T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:22:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16bea0bae8a53a4cc84e77691b822529ddfdadd5f875e08d5d155eb898921baf"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e7359ad76eda8fb07bb05606e45cbb7b1873e67443005ef450389e69c39caec"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec6c62b66610d0a059c6060970d36e68b512a5cbfcb731a50866399272ec166c"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c69ab422a7a8407255c122fa43d318571656ea72bd8ecfa5cd2914991ae1390b"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd0e80bacc038a20ab48cb4804accf0808381e0d5a5bcdd6eb80ccf52fa04d7"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da8c8c64601086e80a4e6ccce20f6cbb85bf1723147c3a49a59f0f30a50d1ba7"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62ad95179a3ab58b2d394a5368a0d8ac5afd373a6af70bdba996829baba15a3c"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d42db687616d5ec9cd8dc4a6651d23b36152d051afb02500a7b9d5e1266050fd"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a12a158221370491b1f54fe981ed632f7b1be6df06020b7fabc864f0f8380314"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/213f180a66a6a7c85981927903128b6bf94f44c17f7a18918c6740056547e454"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e17d5f79569e10f67009d5171d28ac8b818b34327ed3fcce8663649275c4c0c"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e51f7f5853a670e0453a850fff31c7b16f4c4a2c270dd38f4bd0924e04ddceec"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0b68001a11d7f42c5535d8650d2185a340a48ccc513ac821fa046733413e39"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"info","ts":"2026-07-24T18:22:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99734bf77866f11106121b02bdbf5ed68358b82e60af0be349aafa22d564823c"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc"}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f"}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"info","ts":"2026-07-24T18:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"error","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef"}
{"level":"error","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6"}
{"level":"error","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"}
{"level":"error","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44802","PortSpecifier":{"PortValue":44802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","object":"source:{address:{socket_address:{address:\"10.132.0.13:44802\"  port_value:44802}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917432  nanos:473809986}  http:{id:\"a795d08b-e4aa-4677-860d-fdbd9b19ebaa\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"67\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"a795d08b-e4aa-4677-860d-fdbd9b19ebaa\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":473809986,"seconds":1784917432}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44802},"address":"10.132.0.13:44802"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":473809986,"seconds":1784917432},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:44802","port":44802}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/sub-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a795d08b-e4aa-4677-860d-fdbd9b19ebaa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58262","PortSpecifier":{"PortValue":58262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","object":"source:{address:{socket_address:{address:\"10.132.0.13:58262\"  port_value:58262}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917432  nanos:524507669}  http:{id:\"70ff53f6-a441-4995-b99d-1b8d039ee5c7\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"67\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"70ff53f6-a441-4995-b99d-1b8d039ee5c7\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":524507669,"seconds":1784917432}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58262},"address":"10.132.0.13:58262"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":524507669,"seconds":1784917432},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58262","port":58262}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/sub-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ff53f6-a441-4995-b99d-1b8d039ee5c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44814","PortSpecifier":{"PortValue":44814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","object":"source:{address:{socket_address:{address:\"10.132.0.13:44814\"  port_value:44814}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917432  nanos:571959780}  http:{id:\"1536d86c-235f-4a51-8aa1-b3e280bd2621\"  method:\"GET\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"GET\"}  headers:{key:\":path\"  value:\"/maas-api/v1/subscriptions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"1536d86c-235f-4a51-8aa1-b3e280bd2621\"}  path:\"/maas-api/v1/subscriptions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nJl73atbYKgC8I5J_gAD7unYFGtoqEuhoewzeSbiIVscUeHdGnieFXoiVw9i"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96f816ec-419d-487a-8ccd-0288b3a13436","keyName":"e2e-sub-iso-d2cbcf","subscription":"e2e-a-only-d4cb66","tenant":"e2e-shared-a-2542df","userId":"96f816ec-419d-487a-8ccd-0288b3a13436","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1536d86c-235f-4a51-8aa1-b3e280bd2621"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":571959780,"seconds":1784917432}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44814},"address":"10.132.0.13:44814"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1536d86c-235f-4a51-8aa1-b3e280bd2621"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":571959780,"seconds":1784917432},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:44814","port":44814}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/sub-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d4cb66"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1536d86c-235f-4a51-8aa1-b3e280bd2621","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58278","PortSpecifier":{"PortValue":58278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","object":"source:{address:{socket_address:{address:\"10.132.0.13:58278\"  port_value:58278}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917432  nanos:617766394}  http:{id:\"9f412d2e-160b-4b3f-b2f8-fec07440d93c\"  method:\"GET\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"GET\"}  headers:{key:\":path\"  value:\"/maas-api/v1/subscriptions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"9f412d2e-160b-4b3f-b2f8-fec07440d93c\"}  path:\"/maas-api/v1/subscriptions\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-177Af0k09hmoi9ME5_9k7WZ4zNePPSLozbdenoONKGx7TaWmDirlovSRyWlKw"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e19ea486-078f-45f1-84b3-258712dfdc5b","keyName":"e2e-sub-iso-4770e6","subscription":"e2e-b-only-d4cb66","tenant":"e2e-shared-b-f556c1","userId":"e19ea486-078f-45f1-84b3-258712dfdc5b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":617766394,"seconds":1784917432}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58278},"address":"10.132.0.13:58278"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":617766394,"seconds":1784917432},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58278","port":58278}}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/sub-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d4cb66"}
{"level":"info","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:23:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f412d2e-160b-4b3f-b2f8-fec07440d93c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44820","PortSpecifier":{"PortValue":44820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","object":"source:{address:{socket_address:{address:\"10.132.0.13:44820\"  port_value:44820}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917440  nanos:489426514}  http:{id:\"8a0f1c28-bd54-42b1-a05d-67576c6318dc\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"71\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"8a0f1c28-bd54-42b1-a05d-67576c6318dc\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":489426514,"seconds":1784917440}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44820},"address":"10.132.0.13:44820"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":489426514,"seconds":1784917440},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:44820","port":44820}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/sub-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a0f1c28-bd54-42b1-a05d-67576c6318dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58288","PortSpecifier":{"PortValue":58288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","object":"source:{address:{socket_address:{address:\"10.132.0.13:58288\"  port_value:58288}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917440  nanos:530452667}  http:{id:\"6c217a4a-d446-481a-b1fd-d80fc1e4290b\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"71\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"6c217a4a-d446-481a-b1fd-d80fc1e4290b\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":530452667,"seconds":1784917440}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58288},"address":"10.132.0.13:58288"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":530452667,"seconds":1784917440},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58288","port":58288}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/sub-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c217a4a-d446-481a-b1fd-d80fc1e4290b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44826","PortSpecifier":{"PortValue":44826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","object":"source:{address:{socket_address:{address:\"10.132.0.13:44826\"  port_value:44826}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917440  nanos:572633676}  http:{id:\"c9da566d-5038-4aab-8fb9-0ba6d5c4991c\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/internal/v1/subscriptions/select\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"187\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"c9da566d-5038-4aab-8fb9-0ba6d5c4991c\"}  path:\"/maas-api/internal/v1/subscriptions/select\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bBcXJWn0aK65cGKq_62nXcCs0hOs7ouSQOVhbLd31sILmkUpAHj93lVYV0yq"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ac8a52cd-8cdd-4377-8315-bef706b847fa","keyName":"e2e-sub-iso-841422","subscription":"e2e-shared-sub-a71a36","tenant":"e2e-shared-a-2542df","userId":"ac8a52cd-8cdd-4377-8315-bef706b847fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":572633676,"seconds":1784917440}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44826},"address":"10.132.0.13:44826"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":572633676,"seconds":1784917440},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:44826","port":44826}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/sub-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a71a36"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9da566d-5038-4aab-8fb9-0ba6d5c4991c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58296","PortSpecifier":{"PortValue":58296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb1e48e6-f613-4558-943e-6a063d660a34","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","object":"source:{address:{socket_address:{address:\"10.132.0.13:58296\"  port_value:58296}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917440  nanos:606251696}  http:{id:\"bb1e48e6-f613-4558-943e-6a063d660a34\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/internal/v1/subscriptions/select\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"187\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"bb1e48e6-f613-4558-943e-6a063d660a34\"}  path:\"/maas-api/internal/v1/subscriptions/select\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19skhXqK5hMHrnRFp_cJcMrA5QEaEjl8mmqumoIEcT6Hh8Lcyi12sANjoEQNq"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1c26459-fa54-48a4-b58e-b9e7cf41dbfc","keyName":"e2e-sub-iso-878edb","subscription":"e2e-shared-sub-a71a36","tenant":"e2e-shared-b-f556c1","userId":"f1c26459-fa54-48a4-b58e-b9e7cf41dbfc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"bb1e48e6-f613-4558-943e-6a063d660a34"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"bb1e48e6-f613-4558-943e-6a063d660a34","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":606251696,"seconds":1784917440}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58296},"address":"10.132.0.13:58296"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"bb1e48e6-f613-4558-943e-6a063d660a34"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"bb1e48e6-f613-4558-943e-6a063d660a34","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":606251696,"seconds":1784917440},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58296","port":58296}}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/sub-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a71a36"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb1e48e6-f613-4558-943e-6a063d660a34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe2646d514b54c1f2f9b89c295bed748145141dd7e60fe41c1507a2d4cd91e6"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/066c7d312f0af012ef5d82eca152d2a29cdff0680e97677f6ace9e8f80a03dfa"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/183c1e783a4b67aeffe78fe5c381f5b40e47a323e87bfc4fe47c49f2e8534346"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9634f45a92b4a695eca965b8839578d9936ee2501651d3c4352e7d1188eda806"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c0c97a66d6066422691f7da338364b6de64d02a02a9785842f5427580ca30e6"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57d64fd604b32838b147e7e890a97f3d0ad6a811fd8697baf5fa9da773862ac4"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eba8d8e1010195757c64f2be455389879b69bb3888a78b87925915ea2a1d951"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e1dce4013fd9518a59a91adf63e71330ad97dfcd5f09931816823c81bc9d5f"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/182e348d6b50b655006c1fed2729a9d5f7af8b42bab98d136040caa7691d3f29"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2d92603f0989411b7c7d673fb0f3872db5a05cc14d3ae2e4b49997189ca87db"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fa344c2572ede0fe84cfd2768de5e8c0f3d1f3067569fe23cc504f83c962fe8"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7347f92552151edc8ac308c47947e2fb475acec536025cdc890e1520468203fc"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ff0ef512e0e604b50a73540cf42ead9e13ca714b8609aa74760b0e10f186d4"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6115cc15f61b9ce73c289ebfd976d456ce447ec2fd22bc4ca3438d8e0e9f68fa"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4843ca20bc288f8ef2a5615802d43100b17b51da62610d88511e318d8be7756e"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c722b30f1fa5b40f01e4dfcfc559f7516e8e278f436e575aba4897a3a852ffef"}
{"level":"info","ts":"2026-07-24T18:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738"}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:24:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"error","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:24:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60752","PortSpecifier":{"PortValue":60752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","object":"source:{address:{socket_address:{address:\"10.132.0.13:60752\"  port_value:60752}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917499  nanos:874745386}  http:{id:\"0827f4da-341d-4f10-b360-fbbd2eef99e2\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"0827f4da-341d-4f10-b360-fbbd2eef99e2\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0827f4da-341d-4f10-b360-fbbd2eef99e2"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":874745386,"seconds":1784917499}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60752},"address":"10.132.0.13:60752"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0827f4da-341d-4f10-b360-fbbd2eef99e2"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":874745386,"seconds":1784917499},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60752","port":60752}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0827f4da-341d-4f10-b360-fbbd2eef99e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59762","PortSpecifier":{"PortValue":59762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4f96613-5263-4bbf-8e84-17b3d6037435","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","object":"source:{address:{socket_address:{address:\"10.132.0.13:59762\"  port_value:59762}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917499  nanos:918400931}  http:{id:\"a4f96613-5263-4bbf-8e84-17b3d6037435\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"a4f96613-5263-4bbf-8e84-17b3d6037435\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a4f96613-5263-4bbf-8e84-17b3d6037435"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a4f96613-5263-4bbf-8e84-17b3d6037435","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":918400931,"seconds":1784917499}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59762},"address":"10.132.0.13:59762"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a4f96613-5263-4bbf-8e84-17b3d6037435"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a4f96613-5263-4bbf-8e84-17b3d6037435","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":918400931,"seconds":1784917499},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59762","port":59762}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4f96613-5263-4bbf-8e84-17b3d6037435","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60764","PortSpecifier":{"PortValue":60764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","object":"source:{address:{socket_address:{address:\"10.132.0.13:60764\"  port_value:60764}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917499  nanos:963845180}  http:{id:\"574f3d9e-d5ea-4cd5-bb2d-414ae498184d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"574f3d9e-d5ea-4cd5-bb2d-414ae498184d\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZBq5fQ3vnlIExyE_pWtGACZRwKuNBbMtVUqeXZmQFtTadw0RpKcFL9JFV4G"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","subscription":"e2e-rate-iso-a-09ba2c","tenant":"e2e-shared-a-2542df","userId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":963845180,"seconds":1784917499}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60764},"address":"10.132.0.13:60764"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":963845180,"seconds":1784917499},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60764","port":60764}}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09ba2c"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","selected_subscription":"e2e-rate-iso-a-09ba2c","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-09ba2c@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"574f3d9e-d5ea-4cd5-bb2d-414ae498184d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60774","PortSpecifier":{"PortValue":60774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","object":"source:{address:{socket_address:{address:\"10.132.0.13:60774\"  port_value:60774}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917501  nanos:20755840}  http:{id:\"ea1b6fcb-1456-4e08-9948-ce394b2b3013\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"ea1b6fcb-1456-4e08-9948-ce394b2b3013\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZBq5fQ3vnlIExyE_pWtGACZRwKuNBbMtVUqeXZmQFtTadw0RpKcFL9JFV4G"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","subscription":"e2e-rate-iso-a-09ba2c","tenant":"e2e-shared-a-2542df","userId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":20755840,"seconds":1784917501}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60774},"address":"10.132.0.13:60774"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":20755840,"seconds":1784917501},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60774","port":60774}}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09ba2c"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","selected_subscription":"e2e-rate-iso-a-09ba2c","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-09ba2c@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea1b6fcb-1456-4e08-9948-ce394b2b3013","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"213b9f93-08d1-4b30-a599-68efc549a402","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60778","PortSpecifier":{"PortValue":60778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"213b9f93-08d1-4b30-a599-68efc549a402","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"213b9f93-08d1-4b30-a599-68efc549a402","object":"source:{address:{socket_address:{address:\"10.132.0.13:60778\"  port_value:60778}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917502  nanos:62688229}  http:{id:\"213b9f93-08d1-4b30-a599-68efc549a402\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"213b9f93-08d1-4b30-a599-68efc549a402\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZBq5fQ3vnlIExyE_pWtGACZRwKuNBbMtVUqeXZmQFtTadw0RpKcFL9JFV4G"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","subscription":"e2e-rate-iso-a-09ba2c","tenant":"e2e-shared-a-2542df","userId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"213b9f93-08d1-4b30-a599-68efc549a402","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"213b9f93-08d1-4b30-a599-68efc549a402"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"213b9f93-08d1-4b30-a599-68efc549a402","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":62688229,"seconds":1784917502}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60778},"address":"10.132.0.13:60778"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"213b9f93-08d1-4b30-a599-68efc549a402"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"213b9f93-08d1-4b30-a599-68efc549a402","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":62688229,"seconds":1784917502},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60778","port":60778}}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09ba2c"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"213b9f93-08d1-4b30-a599-68efc549a402","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","selected_subscription":"e2e-rate-iso-a-09ba2c","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-09ba2c@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"213b9f93-08d1-4b30-a599-68efc549a402","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"213b9f93-08d1-4b30-a599-68efc549a402","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60554","PortSpecifier":{"PortValue":60554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","object":"source:{address:{socket_address:{address:\"10.132.0.13:60554\"  port_value:60554}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917503  nanos:116476653}  http:{id:\"4ae61e06-a4a6-4242-b300-020d09de9b8e\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"4ae61e06-a4a6-4242-b300-020d09de9b8e\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZBq5fQ3vnlIExyE_pWtGACZRwKuNBbMtVUqeXZmQFtTadw0RpKcFL9JFV4G"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","subscription":"e2e-rate-iso-a-09ba2c","tenant":"e2e-shared-a-2542df","userId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4ae61e06-a4a6-4242-b300-020d09de9b8e"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":116476653,"seconds":1784917503}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60554},"address":"10.132.0.13:60554"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4ae61e06-a4a6-4242-b300-020d09de9b8e"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":116476653,"seconds":1784917503},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60554","port":60554}}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09ba2c"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","selected_subscription":"e2e-rate-iso-a-09ba2c","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-09ba2c@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ae61e06-a4a6-4242-b300-020d09de9b8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60566","PortSpecifier":{"PortValue":60566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5590b015-f775-4c66-9393-a957eb36ae8a","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","object":"source:{address:{socket_address:{address:\"10.132.0.13:60566\"  port_value:60566}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917504  nanos:164293810}  http:{id:\"5590b015-f775-4c66-9393-a957eb36ae8a\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"5590b015-f775-4c66-9393-a957eb36ae8a\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZBq5fQ3vnlIExyE_pWtGACZRwKuNBbMtVUqeXZmQFtTadw0RpKcFL9JFV4G"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","subscription":"e2e-rate-iso-a-09ba2c","tenant":"e2e-shared-a-2542df","userId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5590b015-f775-4c66-9393-a957eb36ae8a"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"5590b015-f775-4c66-9393-a957eb36ae8a","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":164293810,"seconds":1784917504}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60566},"address":"10.132.0.13:60566"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5590b015-f775-4c66-9393-a957eb36ae8a"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"5590b015-f775-4c66-9393-a957eb36ae8a","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":164293810,"seconds":1784917504},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60566","port":60566}}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09ba2c"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","selected_subscription":"e2e-rate-iso-a-09ba2c","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-09ba2c@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5590b015-f775-4c66-9393-a957eb36ae8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60582","PortSpecifier":{"PortValue":60582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","object":"source:{address:{socket_address:{address:\"10.132.0.13:60582\"  port_value:60582}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917505  nanos:206464102}  http:{id:\"80dea192-21a7-42d0-a8f1-7ee7377ebf3c\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"80dea192-21a7-42d0-a8f1-7ee7377ebf3c\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8ZBq5fQ3vnlIExyE_pWtGACZRwKuNBbMtVUqeXZmQFtTadw0RpKcFL9JFV4G"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","subscription":"e2e-rate-iso-a-09ba2c","tenant":"e2e-shared-a-2542df","userId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":206464102,"seconds":1784917505}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60582},"address":"10.132.0.13:60582"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":206464102,"seconds":1784917505},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60582","port":60582}}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-09ba2c"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7de426c0-3e2f-4850-ab55-5c04cf78d307","keyName":"e2e-rate-a-09ba2c","selected_subscription":"e2e-rate-iso-a-09ba2c","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-09ba2c@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-09ba2c","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80dea192-21a7-42d0-a8f1-7ee7377ebf3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60592","PortSpecifier":{"PortValue":60592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42c51717-c4ac-465b-b758-d1e63914a6d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","object":"source:{address:{socket_address:{address:\"10.132.0.13:60592\"  port_value:60592}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917511  nanos:738048675}  http:{id:\"42c51717-c4ac-465b-b758-d1e63914a6d8\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"42c51717-c4ac-465b-b758-d1e63914a6d8\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"42c51717-c4ac-465b-b758-d1e63914a6d8"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"42c51717-c4ac-465b-b758-d1e63914a6d8","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":738048675,"seconds":1784917511}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60592},"address":"10.132.0.13:60592"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"42c51717-c4ac-465b-b758-d1e63914a6d8"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"42c51717-c4ac-465b-b758-d1e63914a6d8","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":738048675,"seconds":1784917511},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60592","port":60592}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42c51717-c4ac-465b-b758-d1e63914a6d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47012","PortSpecifier":{"PortValue":47012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","object":"source:{address:{socket_address:{address:\"10.132.0.13:47012\"  port_value:47012}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917511  nanos:786162245}  http:{id:\"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":786162245,"seconds":1784917511}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47012},"address":"10.132.0.13:47012"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":786162245,"seconds":1784917511},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47012","port":47012}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e5256a5-1c8b-4cf1-a3bf-8b091bdead2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60608","PortSpecifier":{"PortValue":60608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","object":"source:{address:{socket_address:{address:\"10.132.0.13:60608\"  port_value:60608}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917511  nanos:824585723}  http:{id:\"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jasK3VfNisbeskFA_OQhRUxRXuP4963WyujDQy7lMwcRfK6zl6KXVZVndhbH"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","keyName":"e2e-rate-a-31e732","subscription":"e2e-rate-iso-a-31e732","tenant":"e2e-shared-a-2542df","userId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31e732","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":824585723,"seconds":1784917511}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60608},"address":"10.132.0.13:60608"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":824585723,"seconds":1784917511},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:60608","port":60608}}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31e732"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","keyName":"e2e-rate-a-31e732","selected_subscription":"e2e-rate-iso-a-31e732","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-31e732@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31e732","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bc783ac-4504-4ff9-bb9a-6e9fdc4480b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34744","PortSpecifier":{"PortValue":34744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","object":"source:{address:{socket_address:{address:\"10.132.0.13:34744\"  port_value:34744}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917512  nanos:864725636}  http:{id:\"a1a45205-aab1-4019-ae8d-2e2981e9fb34\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"a1a45205-aab1-4019-ae8d-2e2981e9fb34\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jasK3VfNisbeskFA_OQhRUxRXuP4963WyujDQy7lMwcRfK6zl6KXVZVndhbH"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","keyName":"e2e-rate-a-31e732","subscription":"e2e-rate-iso-a-31e732","tenant":"e2e-shared-a-2542df","userId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31e732","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":864725636,"seconds":1784917512}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34744},"address":"10.132.0.13:34744"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":864725636,"seconds":1784917512},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:34744","port":34744}}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31e732"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","keyName":"e2e-rate-a-31e732","selected_subscription":"e2e-rate-iso-a-31e732","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-31e732@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31e732","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1a45205-aab1-4019-ae8d-2e2981e9fb34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34758","PortSpecifier":{"PortValue":34758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","object":"source:{address:{socket_address:{address:\"10.132.0.13:34758\"  port_value:34758}}}  destination:{address:{socket_address:{address:\"10.134.0.66:443\"  port_value:443}}}  request:{time:{seconds:1784917513  nanos:906892625}  http:{id:\"e3a880c3-44fa-4cf2-852c-7edcb05f9d36\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdC02Yjk2N2I2NzY0LWY1NTlyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTI1NDJkZi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0yNTQyZGYtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"e3a880c3-44fa-4cf2-852c-7edcb05f9d36\"}  path:\"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions\"  host:\"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jasK3VfNisbeskFA_OQhRUxRXuP4963WyujDQy7lMwcRfK6zl6KXVZVndhbH"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","keyName":"e2e-rate-a-31e732","subscription":"e2e-rate-iso-a-31e732","tenant":"e2e-shared-a-2542df","userId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2542df.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31e732","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":906892625,"seconds":1784917513}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34758},"address":"10.132.0.13:34758"}}}}},"destination":{"address":"10.134.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"},"headers":{":authority":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2542df-kserve-workload-svc.ai-tenant-e2e-shared-a-2542df.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.66~e2e-shared-a-2542df-openshift-default-6b967b6764-f559r.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36"},"host":"e2e-shared-a-2542df.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","method":"POST","path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":906892625,"seconds":1784917513},"url_path":"/ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:34758","port":34758}}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2542df/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31e732"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d03b59b-2f9e-4deb-8957-bad5f3c05fd2","keyName":"e2e-rate-a-31e732","selected_subscription":"e2e-rate-iso-a-31e732","selected_subscription_key":"ai-tenant-e2e-shared-a-2542df/e2e-rate-iso-a-31e732@ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2542df","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31e732","namespace":"ai-tenant-e2e-shared-a-2542df","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2542df/rate-test-model-2542df"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3a880c3-44fa-4cf2-852c-7edcb05f9d36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51910","PortSpecifier":{"PortValue":51910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edb701fd-de9b-4584-90b6-c9afa334b87b","method":"POST","path":"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions","host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","object":"source:{address:{socket_address:{address:\"10.132.0.13:51910\"  port_value:51910}}}  destination:{address:{socket_address:{address:\"10.134.0.67:443\"  port_value:443}}}  request:{time:{seconds:1784917513  nanos:948215487}  http:{id:\"edb701fd-de9b-4584-90b6-c9afa334b87b\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-f556c1-kserve-workload-svc.ai-tenant-e2e-shared-b-f556c1.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"edb701fd-de9b-4584-90b6-c9afa334b87b\"}  path:\"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions\"  host:\"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y9vVM93cxyj2j5cm_SFVmSQY6AwFMx0PZ2EJbAYbcNu6RlZro454oJwNFp3l"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d83f6671-d34d-47ca-a966-85f8b523bb6a","keyName":"e2e-rate-b-31e732","subscription":"e2e-rate-iso-b-31e732","tenant":"e2e-shared-b-f556c1","userId":"d83f6671-d34d-47ca-a966-85f8b523bb6a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f556c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f556c1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-31e732","namespace":"ai-tenant-e2e-shared-b-f556c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1"}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f556c1-kserve-workload-svc.ai-tenant-e2e-shared-b-f556c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdC02ODU2NWQ3OTliLWRna2RqCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWY1NTZjMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mNTU2YzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"edb701fd-de9b-4584-90b6-c9afa334b87b"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"edb701fd-de9b-4584-90b6-c9afa334b87b","method":"POST","path":"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":948215487,"seconds":1784917513}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51910},"address":"10.132.0.13:51910"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353"},"headers":{":authority":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f556c1-kserve-workload-svc.ai-tenant-e2e-shared-b-f556c1.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-shared-b-f556c1-openshift-default-68565d799b-dgkdj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"edb701fd-de9b-4584-90b6-c9afa334b87b"},"host":"e2e-shared-b-f556c1.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"edb701fd-de9b-4584-90b6-c9afa334b87b","method":"POST","path":"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":948215487,"seconds":1784917513},"url_path":"/ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:51910","port":51910}}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f556c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-31e732"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d83f6671-d34d-47ca-a966-85f8b523bb6a","keyName":"e2e-rate-b-31e732","selected_subscription":"e2e-rate-iso-b-31e732","selected_subscription_key":"ai-tenant-e2e-shared-b-f556c1/e2e-rate-iso-b-31e732@ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f556c1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-31e732","namespace":"ai-tenant-e2e-shared-b-f556c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f556c1/rate-test-model-f556c1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:25:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb701fd-de9b-4584-90b6-c9afa334b87b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f41ac9f45af4693a2937e28eb3a28ef68ad8172a860d5f298895c8ea9d2c1b1"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/556da300ee9d8db38abf43c571b2dd5a895041dc443f2e579d08e9051f03f277"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84abf48a1fac3d5555c4eb08ff090a9d0ad55426c2ad625f7ed7428005e8445d"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/285a5eff6cfe44e3d80e743d394f824fc609cf4402fbe38a0415bf5f664cbb68"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7fa6e5f1d5efa0fcd08c72358b5a14ad360ec023b2978d06e868141874c9de1"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eb07abd832f95c61aca8da6caa86f165a47a759d59a0464fc1bae608b04b046"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d3eb0c21320930642f261102c051e4e699cb91c6d3dd827de95fc3b73a7177e"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0542e62501ae161c599b0d17787897ded7164ed87adfcb559a5ef4230a479353"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5197460ff3caee6f19754d100a5b0ad350f71707a3fe5f8df7bc3378e2095fb5"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/617c21b50a3a697cda6e975394115e3c8c5e816618503f431de6669533c31c9f"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c9671e319b2444ff8b6f2ca924aedd5d1d7766975342349298b955707401f45"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e64c244e727d65ae3d8d8ae253ad02cfa2ecb25ebc49ae6af8f8ea970583d431"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f27d7cfc56ef211d2804ec0c43c6b8b51e289c441447ea29f0cbc27621d8718"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ec07147371d77f0a51b225092aff13030e0bdbb2a947dafe80ec432351c9a4d"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0630373b6bb3f6cab5dad056a5de8482a57a602e993889d85fae17162f5e87de"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a86e8103a3a5a8a2e30f6f28e6643190d84f195bcff2482bfe749335d539fc"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77c082b9e0e86c9a404a261369e6a530fcb56767c3ced636cffb8a07950cc18e"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/444473d690595ea62a6b92a06eb19b27a1feee3cb08d3eaf9ec92c3216b2e5d5"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72cefceccaafbbe834df8892a254340532208fddd26dde0cb94bf4023ec89738"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/993b4865677e37b6b510e38323cc133f0cd7b98d2bc66b9924d8614027f6eb8f"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ba794c1f62267b5ed22ddc8381e9962f287c6533edb8a61cbcad56dd8352500"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feab34305b20c26037f41c10051a4a400208ecb660662c7881308a0f4b3aa61e"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf8577adb713bf6ae16023200d0de0b3fb317e89cfd28625d6270765071eea3a"}
{"level":"info","ts":"2026-07-24T18:25:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40767a1d727c9d58c08d58a244240b69f05e5a22e0088e3b049fa65e29006a3d"}
{"level":"info","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50212","PortSpecifier":{"PortValue":50212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.29:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8caa826-df34-4c12-9924-2fbefe33694d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","object":"source:{address:{socket_address:{address:\"10.132.0.13:50212\"  port_value:50212}}}  destination:{address:{socket_address:{address:\"10.132.0.29:443\"  port_value:443}}}  request:{time:{seconds:1784917578  nanos:25970463}  http:{id:\"b8caa826-df34-4c12-9924-2fbefe33694d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.29~maas-default-gateway-openshift-default-78bb78ff78-tlnpt.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"b8caa826-df34-4c12-9924-2fbefe33694d\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.29:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.29~maas-default-gateway-openshift-default-78bb78ff78-tlnpt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b8caa826-df34-4c12-9924-2fbefe33694d"},"host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"b8caa826-df34-4c12-9924-2fbefe33694d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":25970463,"seconds":1784917578}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50212},"address":"10.132.0.13:50212"}}}}},"destination":{"address":"10.132.0.29:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXRsbnB0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.29~maas-default-gateway-openshift-default-78bb78ff78-tlnpt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b8caa826-df34-4c12-9924-2fbefe33694d"},"host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"b8caa826-df34-4c12-9924-2fbefe33694d","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":25970463,"seconds":1784917578},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:50212","port":50212}}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8caa826-df34-4c12-9924-2fbefe33694d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50216","PortSpecifier":{"PortValue":50216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.29:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","object":"source:{address:{socket_address:{address:\"10.132.0.13:50216\"  port_value:50216}}}  destination:{address:{socket_address:{address:\"10.132.0.29:443\"  port_value:443}}}  request:{time:{seconds:1784917578  nanos:90184801}  http:{id:\"050d3e59-1c77-41e1-99ac-4d57652dbb0c\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.29~maas-default-gateway-openshift-default-78bb78ff78-tlnpt.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"050d3e59-1c77-41e1-99ac-4d57652dbb0c\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LtD2N933zOtIwWKp_MhHGWAlaQ61sMdpQGrk0udz0f5qCfUAxjZbNNvLrWOF"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"303f4bde-aacc-4e14-a3e0-2808876883f9","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"303f4bde-aacc-4e14-a3e0-2808876883f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.29:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.29~maas-default-gateway-openshift-default-78bb78ff78-tlnpt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c"},"host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":90184801,"seconds":1784917578}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50216},"address":"10.132.0.13:50216"}}}}},"destination":{"address":"10.132.0.29:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.29~maas-default-gateway-openshift-default-78bb78ff78-tlnpt.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c"},"host":"maas.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":90184801,"seconds":1784917578},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:50216","port":50216}}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"303f4bde-aacc-4e14-a3e0-2808876883f9","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:26:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"050d3e59-1c77-41e1-99ac-4d57652dbb0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"}
{"level":"error","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"error","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4"}
{"level":"error","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T18:26:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"}
{"level":"error","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a720336d-0e58-4bf4-91cb-19987d540030","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53898","PortSpecifier":{"PortValue":53898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a720336d-0e58-4bf4-91cb-19987d540030","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a720336d-0e58-4bf4-91cb-19987d540030","object":"source:{address:{socket_address:{address:\"10.132.0.13:53898\"  port_value:53898}}}  destination:{address:{socket_address:{address:\"10.132.0.56:443\"  port_value:443}}}  request:{time:{seconds:1784917612  nanos:683475912}  http:{id:\"a720336d-0e58-4bf4-91cb-19987d540030\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.56~e2e-ipp-a-d91e94-openshift-default-5dd8dfdcf4-57qvh.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"a720336d-0e58-4bf4-91cb-19987d540030\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a720336d-0e58-4bf4-91cb-19987d540030","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a720336d-0e58-4bf4-91cb-19987d540030","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7722a85076ed"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=86f95cc8-dcd9-4967-be1f-1b8596020263"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f8f0f556-474c-47d7-b1c1-a22e40d030f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-ipp-a-d91e94-openshift-default-5dd8dfdcf4-57qvh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a720336d-0e58-4bf4-91cb-19987d540030"},"host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a720336d-0e58-4bf4-91cb-19987d540030","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":683475912,"seconds":1784917612}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53898},"address":"10.132.0.13:53898"}}}}},"destination":{"address":"10.132.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"},"headers":{":authority":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-ipp-a-d91e94-openshift-default-5dd8dfdcf4-57qvh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a720336d-0e58-4bf4-91cb-19987d540030"},"host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"a720336d-0e58-4bf4-91cb-19987d540030","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":683475912,"seconds":1784917612},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:53898","port":53898}}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-d91e94/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a720336d-0e58-4bf4-91cb-19987d540030","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a720336d-0e58-4bf4-91cb-19987d540030","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:26:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a720336d-0e58-4bf4-91cb-19987d540030","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53914","PortSpecifier":{"PortValue":53914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f37e2734-d182-4af8-8374-ad62e333cbb9","method":"POST","path":"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions","host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","object":"source:{address:{socket_address:{address:\"10.132.0.13:53914\"  port_value:53914}}}  destination:{address:{socket_address:{address:\"10.132.0.56:443\"  port_value:443}}}  request:{time:{seconds:1784917614  nanos:748568226}  http:{id:\"f37e2734-d182-4af8-8374-ad62e333cbb9\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"110\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=52.71.36.72;host=e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-d91e94-kserve-workload-svc.ai-tenant-e2e-ipp-a-d91e94.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.13\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.56~e2e-ipp-a-d91e94-openshift-default-5dd8dfdcf4-57qvh.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"52.71.36.72,10.132.0.13\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"f37e2734-d182-4af8-8374-ad62e333cbb9\"}  path:\"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions\"  host:\"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPHjF4VCDM3O8SNk_gMS6GrcQsq8Si179h7FSYIbhqTtNLs3ovp6t1pNawh9"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc56768c-f6a4-4100-9366-759344c5144a","keyName":"e2e-ipp-d91e94","subscription":"ipp-route-d91e94-sub","tenant":"e2e-ipp-a-d91e94","userId":"cc56768c-f6a4-4100-9366-759344c5144a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-d91e94.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-d91e94","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-d91e94-sub","namespace":"ai-tenant-e2e-ipp-a-d91e94","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94"}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"110","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-d91e94-kserve-workload-svc.ai-tenant-e2e-ipp-a-d91e94.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-ipp-a-d91e94-openshift-default-5dd8dfdcf4-57qvh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f37e2734-d182-4af8-8374-ad62e333cbb9"},"host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"f37e2734-d182-4af8-8374-ad62e333cbb9","method":"POST","path":"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":748568226,"seconds":1784917614}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53914},"address":"10.132.0.13:53914"}}}}},"destination":{"address":"10.132.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"},"headers":{":authority":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"110","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-d91e94-kserve-workload-svc.ai-tenant-e2e-ipp-a-d91e94.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1kOTFlOTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWQ5MWU5NC1vcGVuc2hpZnQtZGVmYXVsdC01ZGQ4ZGZkY2Y0LTU3cXZoCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWQ5MWU5NC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1kOTFlOTQtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.56~e2e-ipp-a-d91e94-openshift-default-5dd8dfdcf4-57qvh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.13","x-forwarded-host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f37e2734-d182-4af8-8374-ad62e333cbb9"},"host":"e2e-ipp-a-d91e94.apps.1934cc3c-2753-45f5-9fec-7722a85076ed.prod.konfluxeaas.com","id":"f37e2734-d182-4af8-8374-ad62e333cbb9","method":"POST","path":"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":748568226,"seconds":1784917614},"url_path":"/ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:53914","port":53914}}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-d91e94/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-d91e94-sub"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc56768c-f6a4-4100-9366-759344c5144a","keyName":"e2e-ipp-d91e94","selected_subscription":"ipp-route-d91e94-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94-sub@ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-d91e94","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-d91e94-sub","namespace":"ai-tenant-e2e-ipp-a-d91e94","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-d91e94/ipp-route-d91e94"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T18:26:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f37e2734-d182-4af8-8374-ad62e333cbb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7b5f58c1009d1de3647368d23c44c90b120a8c1908b94d93fb153817e67d26a"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a160a89c2016edf2909c194eded7d977ba2ce3026442cf85499aaa31a19d563e"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7831677fd5e85ec71bca780621627a0ef990e96c35cad726b87f259ae13badf9"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/967910d796e0114922e89631a5cd9370ccc5c86067ea204d007e8f13d570f8a5"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b9108ea58a19570585b4728c0769984ac0a8cb526327cd594d48cfb82d6600e"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27c56ad9d0e3cff430e6fc2b54d3b437b0692b8729444339d172cb695a246d32"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cb8e812b9195d993ea73ffe1f755f1e6fd9532a556d0ddf69992da608a32220"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/640861b7a04dec721ff728c805b424208fd51a42e87a54f30ddb53f6a11d0e79"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32bf802e2c8311cc017989d5d89171e72e7bc5019761bfcfb2c0978ec5446644"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/917e470c9129991bdd834349cee46ccd35aa08df77b94a2072231127e8a4b314"}
{"level":"info","ts":"2026-07-24T18:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e79630c79fd1b920b2c6e3987299058872fa6488d22097045024a48351b4ba4"}
{"level":"info","ts":"2026-07-24T18:27:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bebd641c32f18e3b2e1bb68c30e5d6e4354b5ff57f2d2d17d2451a305a02533"}