{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"error","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"error","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:26:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"}
{"level":"debug","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"}
{"level":"info","ts":"2026-07-07T00:26:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57284","PortSpecifier":{"PortValue":57284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57284","PortSpecifier":{"PortValue":57284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":55521229},"http":{"id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"992ff0ef-2ef4-4a86-8257-b22c95b49a8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07898bcd-444e-45ae-bebd-ab40547874e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":115223993},"http":{"id":"07898bcd-444e-45ae-bebd-ab40547874e1","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07898bcd-444e-45ae-bebd-ab40547874e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27b0fddb-797d-405e-89c7-33178f2a90a7","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57294","PortSpecifier":{"PortValue":57294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383970,"nanos":160398204},"http":{"id":"27b0fddb-797d-405e-89c7-33178f2a90a7","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y\"}"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","subscription":"e2e-rate-iso-a-31dbd9","tenant":"e2e-shared-a-b60cd9","userId":"983428b2-0d08-48a7-80df-1962569f3c56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-31dbd9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31dbd9"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","selected_subscription":"e2e-rate-iso-a-31dbd9","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-31dbd9@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b0fddb-797d-405e-89c7-33178f2a90a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57304","PortSpecifier":{"PortValue":57304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57304","PortSpecifier":{"PortValue":57304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383971,"nanos":222296837},"http":{"id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y\"}"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","subscription":"e2e-rate-iso-a-31dbd9","tenant":"e2e-shared-a-b60cd9","userId":"983428b2-0d08-48a7-80df-1962569f3c56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-31dbd9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31dbd9"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","selected_subscription":"e2e-rate-iso-a-31dbd9","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-31dbd9@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef8056f8-23af-4042-88a7-f72f9b4d49d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57320","PortSpecifier":{"PortValue":57320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57320","PortSpecifier":{"PortValue":57320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383972,"nanos":259653121},"http":{"id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C6oifJ5jTsNfezWZ_v2ylsJIMKnmV2YWUCADL33BGvkJXyKpq7FBHKrP008y\"}"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","subscription":"e2e-rate-iso-a-31dbd9","tenant":"e2e-shared-a-b60cd9","userId":"983428b2-0d08-48a7-80df-1962569f3c56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-31dbd9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-31dbd9"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"983428b2-0d08-48a7-80df-1962569f3c56","keyName":"e2e-rate-a-31dbd9","selected_subscription":"e2e-rate-iso-a-31dbd9","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-31dbd9@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-31dbd9","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9970382c-81ee-4e30-b6fe-0e37e5edad80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383983,"nanos":19736785},"http":{"id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f19830e-79e4-4db5-ba2b-158b8ed0b8ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41356","PortSpecifier":{"PortValue":41356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41356","PortSpecifier":{"PortValue":41356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383983,"nanos":58841728},"http":{"id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b88c432-a514-474a-8d0b-5017faf84c00","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"]}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a4bae9dc8136"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=96987d09-19e0-49ec-a00f-dd54630b326a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b88c432-a514-474a-8d0b-5017faf84c00","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bb59dc-fe6b-4dce-b138-7d129c44b1ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50144","PortSpecifier":{"PortValue":50144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383983,"nanos":100018288},"http":{"id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne\"}"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","subscription":"e2e-rate-iso-a-ce7ced","tenant":"e2e-shared-a-b60cd9","userId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","selected_subscription":"e2e-rate-iso-a-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-ce7ced@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880ed4ef-04b0-4aa5-bb06-4af367e7c841","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50160","PortSpecifier":{"PortValue":50160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eff72f1-5b21-48a6-8364-590ea381ed07","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50160","PortSpecifier":{"PortValue":50160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383984,"nanos":135376913},"http":{"id":"8eff72f1-5b21-48a6-8364-590ea381ed07","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne\"}"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","subscription":"e2e-rate-iso-a-ce7ced","tenant":"e2e-shared-a-b60cd9","userId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","selected_subscription":"e2e-rate-iso-a-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-ce7ced@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eff72f1-5b21-48a6-8364-590ea381ed07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c20021-4836-4bef-b86f-e889d59c7f2b","method":"POST","path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions","host":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383985,"nanos":172954428},"http":{"id":"87c20021-4836-4bef-b86f-e889d59c7f2b","method":"POST","headers":{":authority":"e2e-shared-a-b60cd9.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17oumFx5G8t4yErT8_OyK9OoCdxLIuSypHSOGTvvvff0z2gfdfCa0B7PexNne\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","subscription":"e2e-rate-iso-a-ce7ced","tenant":"e2e-shared-a-b60cd9","userId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\",\"requestedSubscription\":\"e2e-rate-iso-a-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b60cd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"037efc47-3ae4-4b8c-8080-9bd51c589e4b","keyName":"e2e-rate-a-ce7ced","selected_subscription":"e2e-rate-iso-a-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-a-b60cd9/e2e-rate-iso-a-ce7ced@ai-tenant-e2e-shared-a-b60cd9/rate-test-model-b60cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b60cd9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce7ced","namespace":"ai-tenant-e2e-shared-a-b60cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c20021-4836-4bef-b86f-e889d59c7f2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41366","PortSpecifier":{"PortValue":41366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8718195-af5d-4def-9fbe-15da12654a74","method":"POST","path":"/ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e/v1/completions","host":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41366","PortSpecifier":{"PortValue":41366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783383985,"nanos":214672554},"http":{"id":"c8718195-af5d-4def-9fbe-15da12654a74","method":"POST","headers":{":authority":"e2e-shared-b-c6e67e.apps.2de832e2-1a85-488e-9f32-a4bae9dc8136.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1074zTkBaAcwE0Loh_fRUa0bE6MZnIPCFdrI9bpQuUngpkzW5ViSE4Mc7AGC5"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1074zTkBaAcwE0Loh_fRUa0bE6MZnIPCFdrI9bpQuUngpkzW5ViSE4Mc7AGC5\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2923076-1150-4acd-b485-bc404c86db52","keyName":"e2e-rate-b-ce7ced","subscription":"e2e-rate-iso-b-ce7ced","tenant":"e2e-shared-b-c6e67e","userId":"a2923076-1150-4acd-b485-bc404c86db52","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\",\"requestedSubscription\":\"e2e-rate-iso-b-ce7ced\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6e67e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6e67e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ce7ced","namespace":"ai-tenant-e2e-shared-b-c6e67e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8718195-af5d-4def-9fbe-15da12654a74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ce7ced"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8718195-af5d-4def-9fbe-15da12654a74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a2923076-1150-4acd-b485-bc404c86db52","keyName":"e2e-rate-b-ce7ced","selected_subscription":"e2e-rate-iso-b-ce7ced","selected_subscription_key":"ai-tenant-e2e-shared-b-c6e67e/e2e-rate-iso-b-ce7ced@ai-tenant-e2e-shared-b-c6e67e/rate-test-model-c6e67e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6e67e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ce7ced","namespace":"ai-tenant-e2e-shared-b-c6e67e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8718195-af5d-4def-9fbe-15da12654a74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:26:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8718195-af5d-4def-9fbe-15da12654a74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5926ce3715059936258a792c784852bf197aafee45ab320dc77c26c37ffeb87"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2df229e784dfde54974d2a54ecc08b457712ed98fce1e6ff21d1987ef894bb5"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8865b55227171f02276733a9fe3c1506c74dd0e47800cb4d20c21914a0a9e4a7"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f29ed3e82c9235c1cc295939404035d76f45da15925db0ad04280faf20da3c8"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122c052894d32d355fd8b9e1f9365234d0d029c89faf5e1c8933d232e43693aa"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0625f8858fdb00e9a47a69f794302dd5f5a8b8e7740ea4f8299ca25e0d8c4e2c"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee51b6413073a2d0cd688f4969133b8573a3a75b717919b48ff7c7fc7d43eff5"}
{"level":"info","ts":"2026-07-07T00:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7aa8753e397cd3eb5e6757d179a26af48190231b7d4c2bbe9654179c8bf7035"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5155b4593a393a8f8f0f3c1d387c852b186d7c99fe6c5ed41eff0216ee33b15d"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4383b08038f4355b72d585a19883d1da1ac89e789c615db9bcfaf5c88690482"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88caa66c8296fcf4b0f6f6fba7d0012cdc88943f76bad233b3a4b32b1bd17d5f"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56cf4f3fb3a222c02d397ce2dad63e52ec08a943b680ea9a60a60cd6c04faf7c"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5380fbceb83061bdaca49639f0afdff8ffa11eac200a72987f1afe8d58f4e56"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02f0f82ff5955749bc74ddac8fe77064915e3d58da6bec533238bf04e0404fcd"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e214f28a054148b0e67bf3d3eb9dd9be4f2a4e5b50f158d236cf72eea1f1978"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb77b17ee0511961f1785dad5fc282a21945d25b23707bb7bebe4e4ec2dcd180"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dda13794d23847ecc0da89ceee36b74accf8c3e226b06e348af76857522253bb"}
{"level":"info","ts":"2026-07-07T00:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9133a8ee082c46f62c20b49677af4a1c6e7128ef2d041ee08c6962fce8e77a86"}
{"level":"info","ts":"2026-07-07T00:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33a07d4ae22d845d7c0a92e8cd97ff4817a6141b8555d5e835a9db9d49689fb0"}
{"level":"info","ts":"2026-07-07T00:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e71790e66ab2f34f4e4cc555d88ab108192c7effe0993f76895f06bab553829"}