{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"info","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:53:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:53:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"debug","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"info","ts":"2026-07-13T21:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46410","PortSpecifier":{"PortValue":46410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46410","PortSpecifier":{"PortValue":46410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979630,"nanos":866361925},"http":{"id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a8b003-6adc-43a5-ba9a-1d7541fa0bbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b1da0ff-f194-45e0-a6ae-88548697927b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50136","PortSpecifier":{"PortValue":50136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979630,"nanos":906541919},"http":{"id":"1b1da0ff-f194-45e0-a6ae-88548697927b","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b1da0ff-f194-45e0-a6ae-88548697927b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46422","PortSpecifier":{"PortValue":46422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46422","PortSpecifier":{"PortValue":46422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979630,"nanos":946933496},"http":{"id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S\"}"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","subscription":"e2e-rate-iso-a-d3faf9","tenant":"e2e-shared-a-8139bf","userId":"d010d1fb-fcec-4147-8d42-ed349baf2904","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d3faf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3faf9"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","selected_subscription":"e2e-rate-iso-a-d3faf9","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d3faf9@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58bd8bf6-4f49-4ba3-8419-00f14bc99802","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979632,"nanos":10413534},"http":{"id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S\"}"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","subscription":"e2e-rate-iso-a-d3faf9","tenant":"e2e-shared-a-8139bf","userId":"d010d1fb-fcec-4147-8d42-ed349baf2904","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d3faf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3faf9"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","selected_subscription":"e2e-rate-iso-a-d3faf9","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d3faf9@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10dd8b65-db0d-4bd7-8a44-f279047d9934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46450","PortSpecifier":{"PortValue":46450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a84e229b-4152-4b12-9202-900c5caedab0","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46450","PortSpecifier":{"PortValue":46450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979633,"nanos":50419597},"http":{"id":"a84e229b-4152-4b12-9202-900c5caedab0","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FecshvkDYYSnAjjo_QVFv4uA6LwBqVUiO9qCPgrsgnrHBBPbPr9ebjRbcA6S\"}"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","subscription":"e2e-rate-iso-a-d3faf9","tenant":"e2e-shared-a-8139bf","userId":"d010d1fb-fcec-4147-8d42-ed349baf2904","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d3faf9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a84e229b-4152-4b12-9202-900c5caedab0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3faf9"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a84e229b-4152-4b12-9202-900c5caedab0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d010d1fb-fcec-4147-8d42-ed349baf2904","keyName":"e2e-rate-a-d3faf9","selected_subscription":"e2e-rate-iso-a-d3faf9","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d3faf9@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3faf9","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a84e229b-4152-4b12-9202-900c5caedab0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:53:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a84e229b-4152-4b12-9202-900c5caedab0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52178","PortSpecifier":{"PortValue":52178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16c9337a-4560-4222-bcdf-78917d36b8f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52178","PortSpecifier":{"PortValue":52178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979643,"nanos":845371411},"http":{"id":"16c9337a-4560-4222-bcdf-78917d36b8f2","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16c9337a-4560-4222-bcdf-78917d36b8f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50622","PortSpecifier":{"PortValue":50622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c050b729-0c70-4292-9e96-ec4d863410eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50622","PortSpecifier":{"PortValue":50622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979643,"nanos":887821614},"http":{"id":"c050b729-0c70-4292-9e96-ec4d863410eb","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"]}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe369acd4d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e735a425-feba-49cc-a23f-95ccf576cfef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e797399-0fa6-485e-97c0-9bb52777cc90","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c050b729-0c70-4292-9e96-ec4d863410eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52190","PortSpecifier":{"PortValue":52190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52190","PortSpecifier":{"PortValue":52190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979643,"nanos":922892217},"http":{"id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI\"}"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","subscription":"e2e-rate-iso-a-d41061","tenant":"e2e-shared-a-8139bf","userId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","selected_subscription":"e2e-rate-iso-a-d41061","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d41061@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1585582b-c81f-44d3-8c07-bbf5e5db57d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49944","PortSpecifier":{"PortValue":49944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a59abe48-9ea4-4d63-952c-db09763e7e90","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49944","PortSpecifier":{"PortValue":49944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979644,"nanos":976483472},"http":{"id":"a59abe48-9ea4-4d63-952c-db09763e7e90","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI\"}"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","subscription":"e2e-rate-iso-a-d41061","tenant":"e2e-shared-a-8139bf","userId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","selected_subscription":"e2e-rate-iso-a-d41061","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d41061@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a59abe48-9ea4-4d63-952c-db09763e7e90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","method":"POST","path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions","host":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49948","PortSpecifier":{"PortValue":49948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979646,"nanos":16222611},"http":{"id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","method":"POST","headers":{":authority":"e2e-shared-a-8139bf.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fh1vU3A3S9nQbfAR_7AcLxgVRChzSQwLSSEfzlkrQDOrMjPMaZuHn6ChnJMI\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","subscription":"e2e-rate-iso-a-d41061","tenant":"e2e-shared-a-8139bf","userId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\",\"requestedSubscription\":\"e2e-rate-iso-a-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8139bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8139bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af68b78-ccae-4058-82e9-64ef4e8b1d87","keyName":"e2e-rate-a-d41061","selected_subscription":"e2e-rate-iso-a-d41061","selected_subscription_key":"ai-tenant-e2e-shared-a-8139bf/e2e-rate-iso-a-d41061@ai-tenant-e2e-shared-a-8139bf/rate-test-model-8139bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8139bf","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d41061","namespace":"ai-tenant-e2e-shared-a-8139bf","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa987969-d6c6-4590-bd5c-c5e85be3ae83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38554","PortSpecifier":{"PortValue":38554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","method":"POST","path":"/ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6/v1/completions","host":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38554","PortSpecifier":{"PortValue":38554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979646,"nanos":55278463},"http":{"id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","method":"POST","headers":{":authority":"e2e-shared-b-6c68d6.apps.a66d5afa-7bc9-4c46-aef4-fe369acd4d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EQIddBpWL01YplrI_pNYUTcltd2tTLWWBQwH1ZmzjaS13CpcI3c6mA8Pk0YE"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EQIddBpWL01YplrI_pNYUTcltd2tTLWWBQwH1ZmzjaS13CpcI3c6mA8Pk0YE\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db0567d0-7a89-497c-b91f-442bbf1038d3","keyName":"e2e-rate-b-d41061","subscription":"e2e-rate-iso-b-d41061","tenant":"e2e-shared-b-6c68d6","userId":"db0567d0-7a89-497c-b91f-442bbf1038d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\",\"requestedSubscription\":\"e2e-rate-iso-b-d41061\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c68d6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6c68d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d41061","namespace":"ai-tenant-e2e-shared-b-6c68d6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6c68d6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d41061"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"db0567d0-7a89-497c-b91f-442bbf1038d3","keyName":"e2e-rate-b-d41061","selected_subscription":"e2e-rate-iso-b-d41061","selected_subscription_key":"ai-tenant-e2e-shared-b-6c68d6/e2e-rate-iso-b-d41061@ai-tenant-e2e-shared-b-6c68d6/rate-test-model-6c68d6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6c68d6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d41061","namespace":"ai-tenant-e2e-shared-b-6c68d6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285565f9-b5c3-44fd-bee4-02e8911c6c4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1da06f4eeb63c086e40d44e702ea21c0af80983ef014028193edbe537545fc17"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60009d3a31c23802031bcf819de85e7da098083ab74c15130ce99738c935a777"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19bd0f1fca20cb2131d91d6e6d410e90bb26f4427e513f60874898ed686101e9"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7c7d6b53b9c32b75c562e75e5c7b925da67bbd2b3e44937b1278a8c71ec077d"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be64691fa7f84c5cdfa93e61f9d8fc8e6c4f3ca83ff0f92ad26021ebe43c0226"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/953f5ad336538827067e7f8a82fbeef4f0af04743fc7cdcaf4edcdf66c824bbe"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b80fd7cbd9e5a02ba301c850dfe794cac967e6f7253cb37a57e7b69d12c8219b"}
{"level":"info","ts":"2026-07-13T21:54:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1650af657f5f52a5f15aea9c72934bf0a5b7bbd75da77880713684cd4ba3c34e"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b86967a08dc6e8d45b609baf9a94d7751f74c6ab366531b8754b7999cff04b56"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93476e2c1e5c6188c3bd5ff43ad2939edf4a2c128edb6308d6cc0f8a034feb67"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c8634b2177d26d9810bc5d33353a10fea3351a5b1b33a6d123d6959105336f"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ff39fcc6d00f3e64cd63b6159538f815becad5aa7a4e38cf2719290e82cd72"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d9478cc36834267541b4b8ecc668abddbd2b8830df6ddd7f889ed53a39d9b06"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab1a631c8e51114d1c6ea3bc56fd0f0ca28f210b0c25d72a646d657b4a616c0f"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fc1d256c66834c91cab55b30ce9f97ebb157a5dc5722a122105d909805f42d"}
{"level":"info","ts":"2026-07-13T21:54:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6380abee989b1363a542c4a039ef921fb36f913eb87e588baa49931fb90a5cfd"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8488c517ff2c7a75e113cd86269d1525c5585569c4d7220d7537664d7882020b"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e76c0c0d494e435e6f7a155df9a8e404c9356f2c519e9a7af702ce52be356608"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a0fc5bd7697d5be440f2771910ebcf04f20aed6d7dc68c4e6e645e2aa7ba14e"}
{"level":"info","ts":"2026-07-13T21:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83f46a7785c4ec5653e2ba6aab2ebcbcc883ec0001a628385b3f03e3d9641182"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aadf7cf3be2702ee0a33eb3e326c7e2bbbd54683658fa12dd4497ef6583f284c"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/356634e380fc4c8abe9ecf4991c80dfe0b3e434cb46cc8c53f83de4c70e61436"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e813612144f2903e8dd2802916efdec9fb66e894ee759e6af79f032d89586616"}
{"level":"info","ts":"2026-07-13T21:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5c9a9b604a36e5577b5d3653814080213c1f6b31ed9b2b075142694f665ca3"}