{"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"}
{"level":"info","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"}
{"level":"info","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"error","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"info","ts":"2026-07-17T18:55:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"}
{"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"}
{"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"}
{"level":"error","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T18:55:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"error","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"debug","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T18:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T18:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-17T18:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37438","PortSpecifier":{"PortValue":37438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37438","PortSpecifier":{"PortValue":37438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314554,"nanos":667368434},"http":{"id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f01899b-c14c-4fd8-9f95-8bb974b510ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59860","PortSpecifier":{"PortValue":59860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59860","PortSpecifier":{"PortValue":59860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314554,"nanos":707633124},"http":{"id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bccf302-0d8c-4edb-80e5-0de4ef0aaa18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37442","PortSpecifier":{"PortValue":37442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0933774-b461-4ec4-abb6-8eb795589e92","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37442","PortSpecifier":{"PortValue":37442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314554,"nanos":751692502},"http":{"id":"a0933774-b461-4ec4-abb6-8eb795589e92","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92\"}"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","subscription":"e2e-rate-iso-a-d05ebb","tenant":"e2e-shared-a-4280a6","userId":"32b47901-10e8-4200-8260-3b42d7a31fbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-d05ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d05ebb"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","selected_subscription":"e2e-rate-iso-a-d05ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-d05ebb@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0933774-b461-4ec4-abb6-8eb795589e92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314555,"nanos":839439552},"http":{"id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92\"}"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","subscription":"e2e-rate-iso-a-d05ebb","tenant":"e2e-shared-a-4280a6","userId":"32b47901-10e8-4200-8260-3b42d7a31fbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-d05ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d05ebb"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","selected_subscription":"e2e-rate-iso-a-d05ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-d05ebb@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:55:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e08704d-b3a0-48ee-bbcf-7a7975d3dd5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37462","PortSpecifier":{"PortValue":37462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb9a0523-0005-44c5-a2f3-f779ab188272","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37462","PortSpecifier":{"PortValue":37462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314556,"nanos":881525814},"http":{"id":"cb9a0523-0005-44c5-a2f3-f779ab188272","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ib4pFslNkok5gJHd_7oUiyx3clG0xYyeeK8nHQCVCw4N4Lwpl9528DDIQK92\"}"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","subscription":"e2e-rate-iso-a-d05ebb","tenant":"e2e-shared-a-4280a6","userId":"32b47901-10e8-4200-8260-3b42d7a31fbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-d05ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d05ebb"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"32b47901-10e8-4200-8260-3b42d7a31fbe","keyName":"e2e-rate-a-d05ebb","selected_subscription":"e2e-rate-iso-a-d05ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-d05ebb@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d05ebb","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:55:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9a0523-0005-44c5-a2f3-f779ab188272","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59380","PortSpecifier":{"PortValue":59380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314569,"nanos":827377788},"http":{"id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6de33d8-6dfa-4342-a770-d8ff318f463f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34674","PortSpecifier":{"PortValue":34674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34674","PortSpecifier":{"PortValue":34674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314569,"nanos":865110104},"http":{"id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"]}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/017b7d8ad05c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37a040cb-a650-46e3-be33-8e7f7c951dbf"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"32b13692-30e9-4fa8-878a-6b6cf4d90455","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f976fc-4c8d-4348-bdd5-d57ea44ac37d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59386","PortSpecifier":{"PortValue":59386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59386","PortSpecifier":{"PortValue":59386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314569,"nanos":901128598},"http":{"id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR\"}"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","subscription":"e2e-rate-iso-a-8b55fa","tenant":"e2e-shared-a-4280a6","userId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b55fa"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","selected_subscription":"e2e-rate-iso-a-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-8b55fa@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57b52b6d-8f60-453c-ab55-0c9c0166a927","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59392","PortSpecifier":{"PortValue":59392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314570,"nanos":934655728},"http":{"id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR\"}"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","subscription":"e2e-rate-iso-a-8b55fa","tenant":"e2e-shared-a-4280a6","userId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b55fa"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","selected_subscription":"e2e-rate-iso-a-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-8b55fa@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa91f3f8-041f-434c-8bd3-7dc88850747c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59400","PortSpecifier":{"PortValue":59400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","method":"POST","path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions","host":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59400","PortSpecifier":{"PortValue":59400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314571,"nanos":975892286},"http":{"id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","method":"POST","headers":{":authority":"e2e-shared-a-4280a6.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HUYEu1rULE4zeQBL_3ANG3vJBL9UPfnUGceFgh8tJ1fI3AC6OcxoXpvCbNBR\"}"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","subscription":"e2e-rate-iso-a-8b55fa","tenant":"e2e-shared-a-4280a6","userId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\",\"requestedSubscription\":\"e2e-rate-iso-a-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4280a6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4280a6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b55fa"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d91284f-c57a-4c6e-a0cd-dc3031d3fc7a","keyName":"e2e-rate-a-8b55fa","selected_subscription":"e2e-rate-iso-a-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-a-4280a6/e2e-rate-iso-a-8b55fa@ai-tenant-e2e-shared-a-4280a6/rate-test-model-4280a6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4280a6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b55fa","namespace":"ai-tenant-e2e-shared-a-4280a6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d4bfbcb-70d8-414a-9a89-ef4e0950fe18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","method":"POST","path":"/ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0/v1/completions","host":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784314572,"nanos":9284898},"http":{"id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","method":"POST","headers":{":authority":"e2e-shared-b-1671a0.apps.c0551d6a-facb-4f7e-b708-017b7d8ad05c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18e05nYM2ZMy5xfrN_Y7CXoY41Jfx1AaLjH7HWRcQaDLmLvF18jArmPm44hqK"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18e05nYM2ZMy5xfrN_Y7CXoY41Jfx1AaLjH7HWRcQaDLmLvF18jArmPm44hqK\"}"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"075bde58-9004-457a-8d53-9a20da865264","keyName":"e2e-rate-b-8b55fa","subscription":"e2e-rate-iso-b-8b55fa","tenant":"e2e-shared-b-1671a0","userId":"075bde58-9004-457a-8d53-9a20da865264","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\",\"requestedSubscription\":\"e2e-rate-iso-b-8b55fa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1671a0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1671a0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b55fa","namespace":"ai-tenant-e2e-shared-b-1671a0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1671a0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8b55fa"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"075bde58-9004-457a-8d53-9a20da865264","keyName":"e2e-rate-b-8b55fa","selected_subscription":"e2e-rate-iso-b-8b55fa","selected_subscription_key":"ai-tenant-e2e-shared-b-1671a0/e2e-rate-iso-b-8b55fa@ai-tenant-e2e-shared-b-1671a0/rate-test-model-1671a0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1671a0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b55fa","namespace":"ai-tenant-e2e-shared-b-1671a0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-17T18:56:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d7c0ed2-9cb8-4ba9-b3e5-f78dfa08f779","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a60991832306048341a4c396568ebb365a09195f207b26bb5271a9216a67929d"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f67104e53f2888a20e33c0a30b93e5cc53408c2d3f41eb47e9b71fa056284fb"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f89cf3b2bcf8cc6c0d745204d2856c3e36543d0f8d1de8986a0c59364f4d1f5"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c758d79358448623b6257e6ee36beb0642a9a99ca4f4a20b3fef13634ad51b03"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5a8dfc04e3ff2ccc26929a8d735395e234e3d29d32763b7f9e0f2b99df73cf3"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dab0d0df9b10ea8a3fc2e9c3a463fbcf557edb341defdd55d4a7b2954eded57"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca7ea2ec9029dfee3853b523d0a8b8cc6748f20eb84f285ae42cc78c630b5e34"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97830c39ed81d90b71166c286b1ef322181434a1f9df4ac46c8f2220dbe7c650"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ef377143b98008ce9771c50c8ca1080d2233d90e8ff329a481794e65548d99"}
{"level":"info","ts":"2026-07-17T18:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f900328e5456495698dea3321216eae92b676ad8ced9cab7d63ac94d385cc37"}
{"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c88e0ca29dfad4d348ebea369db36be525506a89305b2f73f4b1f22bfe6800ed"}
{"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/534deddab14fddf1b4fec4e2001fd1a7b43df94452651406d9f5a6e980e5ef84"}
{"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2956dbb21ac68be1b5bbc8d17aa1b3b9b7123ceda8b18d0db44f161129d1e8c"}
{"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/993d716cf2650840dcdeec8335519740b171cd88f36effe6531e8ae439d94627"}
{"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3de2ae32465e7bdca449dd80aac3fab0e92c1e699ffe6875d1e6494fd3dec9"}
{"level":"info","ts":"2026-07-17T18:56:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9659f1a943d6def260bf7feebe1d375c41f43a31ce72b5c2b75ec4ab715f7cb"}
{"level":"info","ts":"2026-07-17T18:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11ee8d4473664423d375313087c50429f942503ce4a60cbf03ad4c48087bdfe7"}
{"level":"info","ts":"2026-07-17T18:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aac4ff270881602c1df890a74dd2ef7285a8cf53d178ef58da4a581c64202ea9"}
{"level":"info","ts":"2026-07-17T18:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52f638d1352c8041331c80d962d0ca2e4d2f559c3bac387bd9fdce6188453259"}
{"level":"info","ts":"2026-07-17T18:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57c111a26a3431555c48a5a7e6f24c6f1aed4520025f3b17c77df06be09fb4f7"}
{"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46e6f73e24a639c8b55b9d99997194e201b71d368302807a1c324fada79230df"}
{"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b395775d638909ca9dc404ef9b81d511ee81cb7732dcea2ad21a2ef4bbbb537"}
{"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c826dd4e58f5fb104601924a772a695c038060f880092edba2632dab98b02821"}
{"level":"info","ts":"2026-07-17T18:57:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10be7acbc0c37054232fb98cf47847cb99e824f7321eed2ecbdc109b276d5e42"}