{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"debug","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"info","ts":"2026-07-14T08:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"}
{"level":"info","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T08:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T08:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"}
{"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"}
{"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"}
{"level":"debug","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T08:35:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"}
{"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059d2396-e816-4261-b17a-ec997258da60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37518","PortSpecifier":{"PortValue":37518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"059d2396-e816-4261-b17a-ec997258da60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"059d2396-e816-4261-b17a-ec997258da60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37518","PortSpecifier":{"PortValue":37518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018104,"nanos":877049215},"http":{"id":"059d2396-e816-4261-b17a-ec997258da60","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"059d2396-e816-4261-b17a-ec997258da60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"059d2396-e816-4261-b17a-ec997258da60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"059d2396-e816-4261-b17a-ec997258da60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059d2396-e816-4261-b17a-ec997258da60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"059d2396-e816-4261-b17a-ec997258da60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48438","PortSpecifier":{"PortValue":48438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48438","PortSpecifier":{"PortValue":48438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018104,"nanos":925466569},"http":{"id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f34de7a-adde-4e1f-b09c-42da5e78582b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37534","PortSpecifier":{"PortValue":37534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018104,"nanos":975283609},"http":{"id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe\"}"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","subscription":"e2e-rate-iso-a-408660","tenant":"e2e-shared-a-0324b2","userId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-408660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-408660"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","selected_subscription":"e2e-rate-iso-a-408660","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-408660@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f70212f-f3be-426e-9aa1-6c2fedafd4e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40962","PortSpecifier":{"PortValue":40962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b75b60a9-8817-4b12-abab-21ffa2480444","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40962","PortSpecifier":{"PortValue":40962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018106,"nanos":34338703},"http":{"id":"b75b60a9-8817-4b12-abab-21ffa2480444","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe\"}"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","subscription":"e2e-rate-iso-a-408660","tenant":"e2e-shared-a-0324b2","userId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-408660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-408660"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","selected_subscription":"e2e-rate-iso-a-408660","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-408660@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75b60a9-8817-4b12-abab-21ffa2480444","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40964","PortSpecifier":{"PortValue":40964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b36891a-9063-4080-a4f0-585ea49439ea","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40964","PortSpecifier":{"PortValue":40964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018107,"nanos":77977540},"http":{"id":"8b36891a-9063-4080-a4f0-585ea49439ea","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JbelEr4ECo2sdDfT_bTYeHWIIU7FtuHYzUm3r2BuLTDg1Ij8Yty8EXp5xlJe\"}"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","subscription":"e2e-rate-iso-a-408660","tenant":"e2e-shared-a-0324b2","userId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-408660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-408660"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f35b652e-54c9-4d53-93ef-7ec71801ae00","keyName":"e2e-rate-a-408660","selected_subscription":"e2e-rate-iso-a-408660","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-408660@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-408660","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b36891a-9063-4080-a4f0-585ea49439ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37896","PortSpecifier":{"PortValue":37896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75c028d6-ad7e-4438-a466-04f3e04a1580","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37896","PortSpecifier":{"PortValue":37896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018120,"nanos":101139029},"http":{"id":"75c028d6-ad7e-4438-a466-04f3e04a1580","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75c028d6-ad7e-4438-a466-04f3e04a1580","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57182","PortSpecifier":{"PortValue":57182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57182","PortSpecifier":{"PortValue":57182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018120,"nanos":137357499},"http":{"id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"]}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1a7195b6b6cb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0d330af4-c7b9-4d35-93a9-efbb879ab95b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ceac3cc4-8380-4fcb-bf85-76daef78b4a7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea7ff266-4b4b-498f-80b8-41ed9d29150b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37908","PortSpecifier":{"PortValue":37908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f1656fe-767c-471b-87b0-edf8446aac46","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37908","PortSpecifier":{"PortValue":37908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018120,"nanos":167990165},"http":{"id":"4f1656fe-767c-471b-87b0-edf8446aac46","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL\"}"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","subscription":"e2e-rate-iso-a-6d456c","tenant":"e2e-shared-a-0324b2","userId":"dec77c0a-79be-43b5-95e8-67349507e9af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d456c"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","selected_subscription":"e2e-rate-iso-a-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-6d456c@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f1656fe-767c-471b-87b0-edf8446aac46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f101b324-57e3-4547-a16a-69b295771690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37924","PortSpecifier":{"PortValue":37924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f101b324-57e3-4547-a16a-69b295771690","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f101b324-57e3-4547-a16a-69b295771690","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37924","PortSpecifier":{"PortValue":37924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018121,"nanos":206082136},"http":{"id":"f101b324-57e3-4547-a16a-69b295771690","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f101b324-57e3-4547-a16a-69b295771690","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL\"}"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","subscription":"e2e-rate-iso-a-6d456c","tenant":"e2e-shared-a-0324b2","userId":"dec77c0a-79be-43b5-95e8-67349507e9af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f101b324-57e3-4547-a16a-69b295771690","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f101b324-57e3-4547-a16a-69b295771690","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d456c"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f101b324-57e3-4547-a16a-69b295771690","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","selected_subscription":"e2e-rate-iso-a-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-6d456c@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f101b324-57e3-4547-a16a-69b295771690","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f101b324-57e3-4547-a16a-69b295771690","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37928","PortSpecifier":{"PortValue":37928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73645915-075f-4bfb-b53d-399c41a63a9f","method":"POST","path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions","host":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37928","PortSpecifier":{"PortValue":37928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018122,"nanos":243414456},"http":{"id":"73645915-075f-4bfb-b53d-399c41a63a9f","method":"POST","headers":{":authority":"e2e-shared-a-0324b2.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lyeMW19hUaHeIdmb_QDYUVIUp0RTYVZTe56nnAJiX1k0318fA9usu0RXGnoL\"}"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","subscription":"e2e-rate-iso-a-6d456c","tenant":"e2e-shared-a-0324b2","userId":"dec77c0a-79be-43b5-95e8-67349507e9af","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\",\"requestedSubscription\":\"e2e-rate-iso-a-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0324b2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d456c"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dec77c0a-79be-43b5-95e8-67349507e9af","keyName":"e2e-rate-a-6d456c","selected_subscription":"e2e-rate-iso-a-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-a-0324b2/e2e-rate-iso-a-6d456c@ai-tenant-e2e-shared-a-0324b2/rate-test-model-0324b2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0324b2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d456c","namespace":"ai-tenant-e2e-shared-a-0324b2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73645915-075f-4bfb-b53d-399c41a63a9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57190","PortSpecifier":{"PortValue":57190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84516a2e-0a16-482f-9aa6-89e14388482d","method":"POST","path":"/ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837/v1/completions","host":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:57190","PortSpecifier":{"PortValue":57190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784018122,"nanos":274041960},"http":{"id":"84516a2e-0a16-482f-9aa6-89e14388482d","method":"POST","headers":{":authority":"e2e-shared-b-b9c837.apps.6a6ba292-f7e9-443e-afbb-1a7195b6b6cb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qlcwXlkU6rM6eLRy_rH2wXaI9HmQrRaXZIOveChXDokKebVGJOAko1NP9Cg0"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qlcwXlkU6rM6eLRy_rH2wXaI9HmQrRaXZIOveChXDokKebVGJOAko1NP9Cg0\"}"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0389d5d7-427c-496d-b9ac-a5b820b121a3","keyName":"e2e-rate-b-6d456c","subscription":"e2e-rate-iso-b-6d456c","tenant":"e2e-shared-b-b9c837","userId":"0389d5d7-427c-496d-b9ac-a5b820b121a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\",\"requestedSubscription\":\"e2e-rate-iso-b-6d456c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b9c837.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b9c837","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6d456c","namespace":"ai-tenant-e2e-shared-b-b9c837","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-6d456c"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0389d5d7-427c-496d-b9ac-a5b820b121a3","keyName":"e2e-rate-b-6d456c","selected_subscription":"e2e-rate-iso-b-6d456c","selected_subscription_key":"ai-tenant-e2e-shared-b-b9c837/e2e-rate-iso-b-6d456c@ai-tenant-e2e-shared-b-b9c837/rate-test-model-b9c837","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b9c837","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-6d456c","namespace":"ai-tenant-e2e-shared-b-b9c837","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T08:35:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84516a2e-0a16-482f-9aa6-89e14388482d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/506eefa2cfcd46b8dcba097aac34fbf35ff9ec5c6716884ef88bbbf9968b1df7"}
{"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/217964d7d314300b7c77786283b20a217b03157d243eab86f9b491cd9f905e64"}
{"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c25881046dd4e39d9644779513792ab098bc29ca469021337394ab131b4ed70b"}
{"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7d503e0c808bbedc0a6b3e6cf6df36986bebe521478835d9373be3607e35156"}
{"level":"info","ts":"2026-07-14T08:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23397cfab5ecf42749634631b297b3f9b030dd874fcb39ac4aa5a131518b9321"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e66862f125201439c8779fccb2ffc631b52e9a87a0252d703162d527b04c563"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40d9042c47585f8087d14daaf383e59955b8e3bcc62115b611502f5232afb41f"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8421e0d528296c00c577b077ec7a3c80d395a4759209594f166f58bc9616bc50"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5f6acc9f2ce48f1724dfe5801e5de50f77d7e248463d6c65e951a0fc2d0bd3"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa4f9b36401457f719a881eeb1f5f96aa0ea4dd38c1fbb07717262fc29788ef"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/754872dde5f9d6059d6da7c97085d4f5f29d0485c5596f9f14a072196e8cdfc3"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60e5128ca1be36b3d1d3e2819194e6e8295ed2fced0a7dca400b1bec23347d2a"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/927405d2c852eda21d49df175efeb4c2f8ebef2e504a7fcd3059103977385628"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b3b2fcb6e6dcaccd7e9ce65c71f0e9d5a96fdec7fefb59195c7f91bb27b52d"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8d58c25bb68c3d5cb90debef7d010841ae5416094c6c9477352eba745e03dd1"}
{"level":"info","ts":"2026-07-14T08:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f893d9e5d979884d28ef516ae113697c20da96a1915f48c576fe075ce679eba"}
{"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98a7ebba5212c3be299e242ec3538466c877438b6e1da04b294186489a2fadec"}
{"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/656b33a1f2b99f2305846fb33a58ad36005e445804b17e74d02de7b433cbf1fe"}
{"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0352dfd7793bb10611cbb5728d974f362364b047008f8c740877d1e3472cdd17"}
{"level":"info","ts":"2026-07-14T08:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe4b41e59814b56542d18a1aa38c384b5c907c8ee6c4852f4a028de84e59ca9f"}
{"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8ac2f7bc99a12a7f3ad59ce798032cda5a483a7f2934186fff9a8124348069"}
{"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36c70d93efae14d85a08ac4fd3ea85ed809afa9ab5ba84848ac1060ec1d14cc5"}
{"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53be2cb11cca6fd2d7d04339911d28e690f11703a7acf6c183bcda528553969a"}
{"level":"info","ts":"2026-07-14T08:36:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c18c826ffd7886328ae0cfc95adb98eb55f0e7631ed255948a1a2202aa34cde3"}