{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"debug","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"info","ts":"2026-07-06T18:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:57:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"debug","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:57:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51816","PortSpecifier":{"PortValue":51816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51816","PortSpecifier":{"PortValue":51816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364235,"nanos":788525868},"http":{"id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79936cbe-acd5-46e0-91fe-113ebdac5bab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40540","PortSpecifier":{"PortValue":40540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3097b2c3-323b-41f1-a8bb-52220fda1994","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40540","PortSpecifier":{"PortValue":40540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364235,"nanos":827422333},"http":{"id":"3097b2c3-323b-41f1-a8bb-52220fda1994","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3097b2c3-323b-41f1-a8bb-52220fda1994","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515be33b-c973-4092-990b-137c22789e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51828","PortSpecifier":{"PortValue":51828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"515be33b-c973-4092-990b-137c22789e39","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"515be33b-c973-4092-990b-137c22789e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51828","PortSpecifier":{"PortValue":51828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364235,"nanos":865269866},"http":{"id":"515be33b-c973-4092-990b-137c22789e39","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"515be33b-c973-4092-990b-137c22789e39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg\"}"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","subscription":"e2e-rate-iso-a-172a98","tenant":"e2e-shared-a-8c615a","userId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"515be33b-c973-4092-990b-137c22789e39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-172a98\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"515be33b-c973-4092-990b-137c22789e39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-172a98"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"515be33b-c973-4092-990b-137c22789e39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","selected_subscription":"e2e-rate-iso-a-172a98","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-172a98@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515be33b-c973-4092-990b-137c22789e39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"515be33b-c973-4092-990b-137c22789e39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39074","PortSpecifier":{"PortValue":39074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5570b79-abd9-4dd2-ade9-86d2649df834","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39074","PortSpecifier":{"PortValue":39074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364236,"nanos":930724303},"http":{"id":"b5570b79-abd9-4dd2-ade9-86d2649df834","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg\"}"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","subscription":"e2e-rate-iso-a-172a98","tenant":"e2e-shared-a-8c615a","userId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-172a98\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-172a98"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","selected_subscription":"e2e-rate-iso-a-172a98","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-172a98@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5570b79-abd9-4dd2-ade9-86d2649df834","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39090","PortSpecifier":{"PortValue":39090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39090","PortSpecifier":{"PortValue":39090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364237,"nanos":969827075},"http":{"id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MR9JQonck9C91cLc_tB90T6YhTN1xEBMBeV3inIErVI2d2rvGWp6md3uckPg\"}"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","subscription":"e2e-rate-iso-a-172a98","tenant":"e2e-shared-a-8c615a","userId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-172a98\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-172a98"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6fabb6d7-1ea7-4ad4-ae8b-831a59cf217b","keyName":"e2e-rate-a-172a98","selected_subscription":"e2e-rate-iso-a-172a98","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-172a98@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-172a98","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbc43c7-c008-4f8f-b0f0-ed72954eb798","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37010","PortSpecifier":{"PortValue":37010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21c37fdf-11f6-4615-9173-76494bf7e99a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37010","PortSpecifier":{"PortValue":37010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364253,"nanos":56883482},"http":{"id":"21c37fdf-11f6-4615-9173-76494bf7e99a","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21c37fdf-11f6-4615-9173-76494bf7e99a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53358","PortSpecifier":{"PortValue":53358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53358","PortSpecifier":{"PortValue":53358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364253,"nanos":118445757},"http":{"id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"]}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7dd1a93738e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dc0502fe-1599-4171-88e1-4632cb4c328e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5d4c33d7-43e6-4c2e-b7eb-ed54ecbf7c49","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d46f2b38-5a33-4453-ab94-ebf1be24c0d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5257f70d-213b-4ba4-bc5c-ed975d405253","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364253,"nanos":151740470},"http":{"id":"5257f70d-213b-4ba4-bc5c-ed975d405253","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1\"}"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","subscription":"e2e-rate-iso-a-e9282d","tenant":"e2e-shared-a-8c615a","userId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","selected_subscription":"e2e-rate-iso-a-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-e9282d@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5257f70d-213b-4ba4-bc5c-ed975d405253","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37028","PortSpecifier":{"PortValue":37028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37028","PortSpecifier":{"PortValue":37028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364254,"nanos":193342892},"http":{"id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1\"}"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","subscription":"e2e-rate-iso-a-e9282d","tenant":"e2e-shared-a-8c615a","userId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","selected_subscription":"e2e-rate-iso-a-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-e9282d@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc8a18f6-e621-4edb-889e-7e21ec5be3ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","method":"POST","path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions","host":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37044","PortSpecifier":{"PortValue":37044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364255,"nanos":241243141},"http":{"id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","method":"POST","headers":{":authority":"e2e-shared-a-8c615a.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vQ1jIzWcWQUcorj_SW086Bjq05zhJAP5JhpdgKS7R8B3cFN5qCb1VCpBch1\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","subscription":"e2e-rate-iso-a-e9282d","tenant":"e2e-shared-a-8c615a","userId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\",\"requestedSubscription\":\"e2e-rate-iso-a-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8c615a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8ce59f5f-e80f-4224-87a5-01bfa2582aff","keyName":"e2e-rate-a-e9282d","selected_subscription":"e2e-rate-iso-a-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-a-8c615a/e2e-rate-iso-a-e9282d@ai-tenant-e2e-shared-a-8c615a/rate-test-model-8c615a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8c615a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e9282d","namespace":"ai-tenant-e2e-shared-a-8c615a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62e0a18-179f-4c2b-8f64-3458ed848e10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53366","PortSpecifier":{"PortValue":53366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","method":"POST","path":"/ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177/v1/completions","host":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53366","PortSpecifier":{"PortValue":53366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783364255,"nanos":278503628},"http":{"id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","method":"POST","headers":{":authority":"e2e-shared-b-b67177.apps.2fb2ebb6-df6c-4fa7-ae8a-7dd1a93738e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-imLBWIYpjVKdmdTD_5NHNaAXy9Qcq9xiVtGOns7CUEPfOgI9pmWFjYwkpYQe"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-imLBWIYpjVKdmdTD_5NHNaAXy9Qcq9xiVtGOns7CUEPfOgI9pmWFjYwkpYQe\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"270724ee-d2bd-41e0-96ad-bfda390cf084","keyName":"e2e-rate-b-e9282d","subscription":"e2e-rate-iso-b-e9282d","tenant":"e2e-shared-b-b67177","userId":"270724ee-d2bd-41e0-96ad-bfda390cf084","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\",\"requestedSubscription\":\"e2e-rate-iso-b-e9282d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b67177.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b67177","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e9282d","namespace":"ai-tenant-e2e-shared-b-b67177","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e9282d"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"270724ee-d2bd-41e0-96ad-bfda390cf084","keyName":"e2e-rate-b-e9282d","selected_subscription":"e2e-rate-iso-b-e9282d","selected_subscription_key":"ai-tenant-e2e-shared-b-b67177/e2e-rate-iso-b-e9282d@ai-tenant-e2e-shared-b-b67177/rate-test-model-b67177","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b67177","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e9282d","namespace":"ai-tenant-e2e-shared-b-b67177","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T18:57:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f13b18a9-0238-4052-8db5-d6f9fcf5d524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e229c9fede0bef3b84b6f28971cd1e12fc66dcd60e1c420ddd14445e683fc10c"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ff6c949d8aa9f5bd9477272cf32ecf5882961442821b5e18a47c44645494caa"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5576552513d79d143e3f5dc34e7b2d51449a35418d275edb8e52ae24fba952d6"}
{"level":"info","ts":"2026-07-06T18:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcc291e8e85855fd4e1468c701cb120fff7f8ab2dd7857a694f50dfdb69a9f0"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32fa953ffb48c06d32adeb9c6fb6816332d5dde7bc77a3016c5cf692600a746"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03e78736f07a5ba4d7dcbf23e908074d5baa9fb77c57b096e02025fcd5c6380b"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/454b8608aa45531ca0fa331ccd9c80f398fd2b09ecaab1bc8719f53a2e8abbaa"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8e28a1cecd2d13e964b8d0fedaf5756947ae9ca64df9fff53a606fe1b5edff2"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f559c9fbbf6b174b38fde7171c2d60c258239f372477edc195ad808e195c6081"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79b0cf81a5517fc744465870aba7846a426c4ee13b610cc660660cca95f0bfd1"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47d1dbd6dca764dfeaa7fac7a9a2d0c1ae5276bc9eee40944feea92eddcecbc4"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf77b53fb4d43abf22eeeb20a9f43c6ff476165ad83e24f95059bc2774ea63ea"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6497e1257682372cdcc0cd4e7d3c70a889268949e3123680a41a286a5ff54ed"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46a7316cd4ebe52b0d137468af62fd16728c4b4767869bec74eb44a526263897"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/512753be8c29ca45a1ec30b00ebd65a44ca6f585deab1a3edd6b508b3cfc8074"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d64105d740f4c8778677238f451a10293a0558b960f1e3c73676c348184841ed"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbf440692c44510e325cb03ad098336c0bc70daed979f1c44b4ccca3ae9d0e2e"}
{"level":"info","ts":"2026-07-06T18:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cffe96cf14b0673022ebee10f29be7d95327c08c4c4234549860892ae2127e67"}
{"level":"info","ts":"2026-07-06T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/548a3d7b162d6fb3d2bb279ad2f2e7018792e10b3049c53e2da6f4fed8aca012"}
{"level":"info","ts":"2026-07-06T18:58:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4bd5dd6c4071d467087f3471bed05e6bbaaed6ecef3e12d63469e169b7e894f"}