{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/sub-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ed5d76"}
{"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f93264-cd12-4f60-86ca-5e40c9551650","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640289,"nanos":505837381},"http":{"id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-188XAggx2frSpniJg_u0XQKCFNG8BNRxeMFani1Ijh6ceTqL4reYLS7tJqN4X"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-188XAggx2frSpniJg_u0XQKCFNG8BNRxeMFani1Ijh6ceTqL4reYLS7tJqN4X\"}"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6ab1806-260c-4216-ae5e-8790186d163a","keyName":"e2e-sub-iso-44932e","subscription":"e2e-shared-sub-ed5d76","tenant":"e2e-shared-b-cfed01","userId":"b6ab1806-260c-4216-ae5e-8790186d163a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/sub-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ed5d76"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:24:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33a5f55d-06c0-4fe1-9054-4aad01ae5504","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8e07560cc3bcd6c23407dbb6ef0be66d8134cedf64dc62e9e186787c8ebbbfe"}
{"level":"info","ts":"2026-07-21T13:24:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bed875c048b32fbbc85296aa86c688fc8afa155cb3f2f3ba9f2d03cf9458aec8"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8fbd0876db9bfe5c9b63b4f53448c6d63eaa56757a04a9f90aa3c302bfe1ed2"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27a11b35b3d96be1197fff6a5984a9250370ac75ad0f00b4728e454f3447dde7"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46e4e1303d72ebd35e833aafe8ab58ab27d9a79d01e565f66e5d2793671949d3"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0938a3c2ce635927bd8e5d05eaae101dfbe2b1ca19eb23babc983c94018c4363"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50ca689d6dc93a23011a19f7083d3b548ce1f527f58c331f4cd5634c5d4af466"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c09b4ec1d67c8c1ebfff2190725c391216e90a9da7f0e415e638d3b71eb2bbc1"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22e03c00e4311fcd65a1a5464e4a5761b626d083ead41973d16fd331b7a72b90"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8db21d5afa73dbad87048b4c164d8704515d0c36af8e7fba6d5cdb3b7064e89c"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8350da87b7289f9c8c4a2ea1f796fdf0b837afc4ffd7efae52ede112ee4708c"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3f548c749ff48a75a270126c5916a013d9c3060c2e9bac773f8163f3889aea8"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20d94318eb52e1ad64f2a72879770d976d7a2861e6703cd7351b9c5c1878f8b2"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9d77e706cc8de9bdb83df2a61423137024bf3532be08dd46304367b9bc142cb"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff27434938c3eb02ce27cad17b10cc508f192fe072ad9ff0824c8f29513e235d"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b4c767933b0cf598d395355ecca1770af6d6f5391c14476354d75c987590837"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"}
{"level":"info","ts":"2026-07-21T13:24:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"}
{"level":"debug","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-21T13:25:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-21T13:25:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-21T13:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}
{"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53442","PortSpecifier":{"PortValue":53442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53442","PortSpecifier":{"PortValue":53442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640357,"nanos":880657135},"http":{"id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e865f32a-715b-42cc-85ec-0527d08ec5c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b7cce5-77e2-4eec-b201-9004895442a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640357,"nanos":923472911},"http":{"id":"52b7cce5-77e2-4eec-b201-9004895442a0","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b7cce5-77e2-4eec-b201-9004895442a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53458","PortSpecifier":{"PortValue":53458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53458","PortSpecifier":{"PortValue":53458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640357,"nanos":966715854},"http":{"id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS\"}"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","subscription":"e2e-rate-iso-a-7675bb","tenant":"e2e-shared-a-b3a013","userId":"88bda5cd-259b-4c7d-a626-9423901df036","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-7675bb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7675bb"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","selected_subscription":"e2e-rate-iso-a-7675bb","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-7675bb@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:25:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0908e7e-bb8a-45c6-bc4d-f280b169ce7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53462","PortSpecifier":{"PortValue":53462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53462","PortSpecifier":{"PortValue":53462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640359,"nanos":50574592},"http":{"id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS\"}"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","subscription":"e2e-rate-iso-a-7675bb","tenant":"e2e-shared-a-b3a013","userId":"88bda5cd-259b-4c7d-a626-9423901df036","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-7675bb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7675bb"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","selected_subscription":"e2e-rate-iso-a-7675bb","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-7675bb@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:25:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbe28b76-8801-4ae9-a6ba-fd2b0fa2f1ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53474","PortSpecifier":{"PortValue":53474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8229413-d87a-42bc-bc67-56856315e2fb","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53474","PortSpecifier":{"PortValue":53474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640360,"nanos":97910349},"http":{"id":"b8229413-d87a-42bc-bc67-56856315e2fb","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tA49DnOF5GJjlpbG_VnaddaqIrQ7GVEd0Ntr1iRds2MoNghqP86mmmfaNQkS\"}"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","subscription":"e2e-rate-iso-a-7675bb","tenant":"e2e-shared-a-b3a013","userId":"88bda5cd-259b-4c7d-a626-9423901df036","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-7675bb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7675bb"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88bda5cd-259b-4c7d-a626-9423901df036","keyName":"e2e-rate-a-7675bb","selected_subscription":"e2e-rate-iso-a-7675bb","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-7675bb@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7675bb","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8229413-d87a-42bc-bc67-56856315e2fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46750","PortSpecifier":{"PortValue":46750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46750","PortSpecifier":{"PortValue":46750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640373,"nanos":82310889},"http":{"id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.71:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0943f287-23b5-4ede-a9ca-4711b6ed9dbe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4005b352-82d6-47b0-bc29-c3731c52403e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640373,"nanos":123219169},"http":{"id":"4005b352-82d6-47b0-bc29-c3731c52403e","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"]}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0a361bacecf0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=72311bfe-e34a-433a-b740-246106e10dff"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f5aa058d-95e7-44d9-b569-1542b732ce30","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4005b352-82d6-47b0-bc29-c3731c52403e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46762","PortSpecifier":{"PortValue":46762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46762","PortSpecifier":{"PortValue":46762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640373,"nanos":161234124},"http":{"id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT\"}"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","subscription":"e2e-rate-iso-a-294e09","tenant":"e2e-shared-a-b3a013","userId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-294e09"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","selected_subscription":"e2e-rate-iso-a-294e09","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-294e09@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21f6c50-4bd1-40ec-b1a9-db0e5e78c3c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42828","PortSpecifier":{"PortValue":42828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42828","PortSpecifier":{"PortValue":42828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640374,"nanos":201156334},"http":{"id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT\"}"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","subscription":"e2e-rate-iso-a-294e09","tenant":"e2e-shared-a-b3a013","userId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-294e09"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","selected_subscription":"e2e-rate-iso-a-294e09","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-294e09@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf4fb09-08a3-4178-a708-6fd1a5b70505","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2327629d-1539-4976-a4cc-196fe77da152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2327629d-1539-4976-a4cc-196fe77da152","method":"POST","path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions","host":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2327629d-1539-4976-a4cc-196fe77da152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.71:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640375,"nanos":242929722},"http":{"id":"2327629d-1539-4976-a4cc-196fe77da152","method":"POST","headers":{":authority":"e2e-shared-a-b3a013.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lCrz0PAxkfdwGdyj_GNS4cLLOF9ThhbZFUrz3xKD32svRf6Sx97vYPOsxVlT\"}"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","subscription":"e2e-rate-iso-a-294e09","tenant":"e2e-shared-a-b3a013","userId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\",\"requestedSubscription\":\"e2e-rate-iso-a-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b3a013.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2327629d-1539-4976-a4cc-196fe77da152","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b3a013/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-294e09"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2327629d-1539-4976-a4cc-196fe77da152","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f76d6a56-0b0e-4534-a8c3-6e680439fc24","keyName":"e2e-rate-a-294e09","selected_subscription":"e2e-rate-iso-a-294e09","selected_subscription_key":"ai-tenant-e2e-shared-a-b3a013/e2e-rate-iso-a-294e09@ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b3a013","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-294e09","namespace":"ai-tenant-e2e-shared-a-b3a013","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b3a013/rate-test-model-b3a013"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2327629d-1539-4976-a4cc-196fe77da152","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2327629d-1539-4976-a4cc-196fe77da152","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36182","PortSpecifier":{"PortValue":36182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db7e67a8-8e74-4c94-8121-db7d29410512","method":"POST","path":"/ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01/v1/completions","host":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36182","PortSpecifier":{"PortValue":36182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784640375,"nanos":288899597},"http":{"id":"db7e67a8-8e74-4c94-8121-db7d29410512","method":"POST","headers":{":authority":"e2e-shared-b-cfed01.apps.882fa773-f969-4abf-b07d-0a361bacecf0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NaCxZ0afjxfz6ZQF_PFK0t3MzJiLCSGEIojOxrVzRmYLAyVnyLvM6EJ8yKm2"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NaCxZ0afjxfz6ZQF_PFK0t3MzJiLCSGEIojOxrVzRmYLAyVnyLvM6EJ8yKm2\"}"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce803378-d96b-4b46-b498-c85dd0b54589","keyName":"e2e-rate-b-294e09","subscription":"e2e-rate-iso-b-294e09","tenant":"e2e-shared-b-cfed01","userId":"ce803378-d96b-4b46-b498-c85dd0b54589","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\",\"requestedSubscription\":\"e2e-rate-iso-b-294e09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cfed01.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cfed01","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-294e09","namespace":"ai-tenant-e2e-shared-b-cfed01","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01"}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-cfed01/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-294e09"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce803378-d96b-4b46-b498-c85dd0b54589","keyName":"e2e-rate-b-294e09","selected_subscription":"e2e-rate-iso-b-294e09","selected_subscription_key":"ai-tenant-e2e-shared-b-cfed01/e2e-rate-iso-b-294e09@ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cfed01","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-294e09","namespace":"ai-tenant-e2e-shared-b-cfed01","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-cfed01/rate-test-model-cfed01"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-21T13:26:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db7e67a8-8e74-4c94-8121-db7d29410512","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-21T13:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e64149d493063174b44efb91b8c4aa04cc8f3180aa96a54c02f10eecb4a25d3"}
{"level":"info","ts":"2026-07-21T13:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c6617cb06a25b35b975e59d2e2b0a9bf14b02d56f3f72c66f8344317dc41399"}
{"level":"info","ts":"2026-07-21T13:26:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/867d1904c47c3fa5a7130076e0271ea674541571131b892a0677780c93cc1b33"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07fd17709eb375450d56096a9e90787f63bc96c326647c2fb3009a2e9b6e48a9"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a63598a9354f8b79b23d98e4665aa9efa3ae9f251922ff339265463dda2eb46"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0932c1219f2ed7f93b9210855bdefedd4dbfc7a2e3a89253252a54c39c43879b"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1fce146017c6c00a74b195680ad42cc339805963b25355f4f6399723deb9b88"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95302a3225f5cf51a9261c81adafafe9fb21e446a88bc4aa18fb3551d76341a5"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef8bf6d8b6f1c548bf091adc6f8ce50c27b0f374467e02288bb6c65c8a7542a2"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a8435c24bf8c653822d25061a36e86648e6e54b372ca78e6763ffe38882fe26"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60217d2763a9fd6f49d1b884577f96a7248030db780102bb32895ce3052764a"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eae43647251c268f1c841ca285ea9bcf8903cb77e041be0c3f927071393b63e"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96ba84c56a51d6163a9d0b812ac7f07bced7df6e2fce2608d8a4163301d8b702"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d74ef885df16963e63f4ad0ac0a99c5236d4449f970855ad66d454db56567a82"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d929a88ffb2e8de7ac05ff70fa66bc1975690a2144bf36a6e66c20eaa55e5640"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41ee940bbd3e821e467cfc3e59f7736c86c46b706e18bb80ea83a997b046411d"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/001bfa827fbe458785426c0fb320a8c9ed6bbd9c60573f16536e1fa5d85ac3d4"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4df8388aaa73cfae5a942debe942bd56d5de436b60d2f79f6e54da1976d3857a"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/259f28353fbb4cb0cba7bf4d6a6ff8cbdb76be201287c5b8824ddf0efbefa878"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/686eb53a20d2271042b89002fc2cf108848afba4d4f7f658205f9f8bc3f850aa"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/974a62410ca9a7b4e77cab273475b92200b56858a67c9ebb7ce6f96b0790c7b5"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e41a0843ef7dfee096d7ea81a6978fdedce94347e4dca232572baae380f5e9ca"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20478d3cb11a73f6117305365e28f6dc31a46445a25c6f587dd645d9e0f066be"}
{"level":"info","ts":"2026-07-21T13:26:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3366a74eee6fdf930dee825cb23e6bc0c7a46c34355398eec89b53caf43e6a85"}