{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"info","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"error","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:22:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:22:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"error","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"}
{"level":"error","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T12:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T12:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T12:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"}
{"level":"debug","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"}
{"level":"info","ts":"2026-07-14T12:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"}
{"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42610","PortSpecifier":{"PortValue":42610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42610","PortSpecifier":{"PortValue":42610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031788,"nanos":849255800},"http":{"id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e62aceb-b931-4dba-9f0b-4d08ffceca64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42846","PortSpecifier":{"PortValue":42846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42846","PortSpecifier":{"PortValue":42846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031788,"nanos":892855336},"http":{"id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7712986-5850-4d5d-bfaf-682fcc11e62a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42626","PortSpecifier":{"PortValue":42626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031788,"nanos":937823314},"http":{"id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc\"}"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","subscription":"e2e-rate-iso-a-2f1f58","tenant":"e2e-shared-a-cac82f","userId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-2f1f58\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2f1f58"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","selected_subscription":"e2e-rate-iso-a-2f1f58","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-2f1f58@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a4a53d-0bcf-4475-b30f-4ec3b426fcbe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42640","PortSpecifier":{"PortValue":42640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42640","PortSpecifier":{"PortValue":42640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031789,"nanos":999958393},"http":{"id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc\"}"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","subscription":"e2e-rate-iso-a-2f1f58","tenant":"e2e-shared-a-cac82f","userId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-2f1f58\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2f1f58"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","selected_subscription":"e2e-rate-iso-a-2f1f58","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-2f1f58@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b5f02c0-8a7b-4b28-b401-2bae3e0de824","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42656","PortSpecifier":{"PortValue":42656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42656","PortSpecifier":{"PortValue":42656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031791,"nanos":40388274},"http":{"id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fry2AUJxRHNXVBSB_CE7F4GxlohdrW77oRa3daLDOHMmDbiZolQCiVnWJrgc\"}"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","subscription":"e2e-rate-iso-a-2f1f58","tenant":"e2e-shared-a-cac82f","userId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-2f1f58\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2f1f58"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"492f5b24-f2e9-40d2-99b9-f04aff6b83b5","keyName":"e2e-rate-a-2f1f58","selected_subscription":"e2e-rate-iso-a-2f1f58","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-2f1f58@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2f1f58","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5331873c-8ed4-4113-9b19-f8e7b5b55076","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51468","PortSpecifier":{"PortValue":51468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51468","PortSpecifier":{"PortValue":51468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031804,"nanos":64930868},"http":{"id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ade410b8-da13-4ca3-9a79-33c6ec536d8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33622","PortSpecifier":{"PortValue":33622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33622","PortSpecifier":{"PortValue":33622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031804,"nanos":101897098},"http":{"id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"]}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cfbd5677a4e9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b6ed48a2-3a38-4493-85f2-836c7a73c7bb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b4cecac4-d217-4237-ab0f-84c85034d49d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b46b6430-dc1c-44db-a4ad-460dd7352c16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51478","PortSpecifier":{"PortValue":51478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e142626e-a03e-4f58-bf77-71939d3e1597","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51478","PortSpecifier":{"PortValue":51478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031804,"nanos":138195103},"http":{"id":"e142626e-a03e-4f58-bf77-71939d3e1597","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx\"}"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","subscription":"e2e-rate-iso-a-0b6632","tenant":"e2e-shared-a-cac82f","userId":"ab94a043-950b-4628-a2f2-c025c9c85318","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b6632"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","selected_subscription":"e2e-rate-iso-a-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-0b6632@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e142626e-a03e-4f58-bf77-71939d3e1597","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47336","PortSpecifier":{"PortValue":47336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47336","PortSpecifier":{"PortValue":47336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031805,"nanos":204282099},"http":{"id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx\"}"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","subscription":"e2e-rate-iso-a-0b6632","tenant":"e2e-shared-a-cac82f","userId":"ab94a043-950b-4628-a2f2-c025c9c85318","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b6632"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","selected_subscription":"e2e-rate-iso-a-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-0b6632@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a0f747a-3dd8-42c3-9a08-f65655f21de4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47342","PortSpecifier":{"PortValue":47342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","method":"POST","path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions","host":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47342","PortSpecifier":{"PortValue":47342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031806,"nanos":245237714},"http":{"id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","method":"POST","headers":{":authority":"e2e-shared-a-cac82f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u3DcKUCdcTuAaRx6_gcVI1Mwsgki3QSn2VKcPuWliwjMOElCcOv5Cg0hClfx\"}"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","subscription":"e2e-rate-iso-a-0b6632","tenant":"e2e-shared-a-cac82f","userId":"ab94a043-950b-4628-a2f2-c025c9c85318","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\",\"requestedSubscription\":\"e2e-rate-iso-a-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-cac82f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-cac82f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b6632"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab94a043-950b-4628-a2f2-c025c9c85318","keyName":"e2e-rate-a-0b6632","selected_subscription":"e2e-rate-iso-a-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-a-cac82f/e2e-rate-iso-a-0b6632@ai-tenant-e2e-shared-a-cac82f/rate-test-model-cac82f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cac82f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b6632","namespace":"ai-tenant-e2e-shared-a-cac82f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb67f073-5f8f-4e4d-8d80-f86a5cce4a3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44678","PortSpecifier":{"PortValue":44678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","method":"POST","path":"/ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f/v1/completions","host":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44678","PortSpecifier":{"PortValue":44678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784031806,"nanos":280369586},"http":{"id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","method":"POST","headers":{":authority":"e2e-shared-b-480a7f.apps.725ca226-87f8-4a11-bbce-cfbd5677a4e9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kh0lIpHPeIzS85bR_hv0BizXvYUyXv8jorWaJPZyCbUd1SzJ7VLT1G56YbeG"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kh0lIpHPeIzS85bR_hv0BizXvYUyXv8jorWaJPZyCbUd1SzJ7VLT1G56YbeG\"}"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f620d464-4870-46b8-9605-52a63eaabacb","keyName":"e2e-rate-b-0b6632","subscription":"e2e-rate-iso-b-0b6632","tenant":"e2e-shared-b-480a7f","userId":"f620d464-4870-46b8-9605-52a63eaabacb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\",\"requestedSubscription\":\"e2e-rate-iso-b-0b6632\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-480a7f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-480a7f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0b6632","namespace":"ai-tenant-e2e-shared-b-480a7f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-480a7f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0b6632"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f620d464-4870-46b8-9605-52a63eaabacb","keyName":"e2e-rate-b-0b6632","selected_subscription":"e2e-rate-iso-b-0b6632","selected_subscription_key":"ai-tenant-e2e-shared-b-480a7f/e2e-rate-iso-b-0b6632@ai-tenant-e2e-shared-b-480a7f/rate-test-model-480a7f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-480a7f","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0b6632","namespace":"ai-tenant-e2e-shared-b-480a7f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T12:23:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40f063b0-3c9d-40d4-b960-45c1b34ac247","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T12:23:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a1622d72767c1fe817d979939816ddd8d672a5098bcd46b41e4c170cf47e1f1"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caaaa5999a214363fe96a185632e73ca61c1151b339e960d0adc099052fc3132"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03ba15ccb8fa7926424e7592b5d216ee339dbd7918229d9b70ceac5c74871a60"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bffdfc31bd6bfe84b0fb0f877c7ebb652cc496daebb4b68272fbd0a1b785746"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcf2fbe6e12a870c4315522c97d645616752ef16cb5a672d96dd2f0dc18ec6f9"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a85af9b7f7b759670d26800c50ba1a02d0b9caa2fb047e345ea5c89973da9c"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c42687cb3e15666aa2c3851bd46cf6d1b073b34842e29af84f051d788a09db83"}
{"level":"info","ts":"2026-07-14T12:23:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5b98516d9dcc10478cb36a009e74c49545efb49e141a19204b000026e218719"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6b5b5b80925c2e359fb44138ae8b3a7be81fda0f756c792ea1d9d0791f442f5"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35541c964b9168fe01f2571e48a6160a060e0e0a01d8e558ce4f577b55dbdccb"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f134ab97591fac1ea052e70cc7ab075a22720d0844a52937d924c33e5508df8f"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2355e0d7c4cafeb3015250b7faf43530cb556f579d90b9ecbc209938679c175e"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0085cd21541adf1d9c8dc952b22790b59af76ad80e1098de449ae4a6345b9aef"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5552027e8854b2b75ecdae479d86ca8c2b3b8fd3335e3d6a3a19c8ce82a28e"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b91180686a4a458380efe4902cb5cf9185aa70e074897f48afd9e76beba438f3"}
{"level":"info","ts":"2026-07-14T12:23:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323758e195a859f3f4efece4c3d1e19da1e0196ee9090f3a4dfc9a3b0be53c9f"}
{"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee8b0c70fb29e437113904f40e2589f17ca260c3d78e29831dc04c12622d3486"}
{"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4e4b9633da3db18dd5bd5aebf546a71db719cf35d618a0a754a1d49059cca5"}
{"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee40c46389a03c79f6b88ce55be26bc529e4bca79425134d3b2bedd3077d0b92"}
{"level":"info","ts":"2026-07-14T12:24:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb19620a0ed49e65b7b6cf3bc2a20445e6000c8b234b50390f1662a2d0ac130e"}
{"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6b648b34f17784dc99f89f7b0bc554020875bf3be75242031d1c0c821d13483"}
{"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33ce6e6b03224cb18c3f856df6627c4e0b2c947f1f725fc46eeaf6e809b53f5c"}
{"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53920d7bcc053f543188d56e01ccd2a0b8b25a3fbb7a71526b6984505a8c4c79"}
{"level":"info","ts":"2026-07-14T12:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3666d517008c399c9d2d94258308448b68ddce28dca1d98b7ff5b7859e32c05e"}